LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
fdb6a4253570bc6140d7d61d0eda5839389d7951e86f9cd52f6fe91e43b3eb7a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fdb6a4253570bc6140d7d61d0eda5839389d7951e86f9cd52f6fe91e43b3eb7a.exe
Resource
win10v2004-20230703-en
Target
fdb6a4253570bc6140d7d61d0eda5839389d7951e86f9cd52f6fe91e43b3eb7a
Size
3.7MB
MD5
f1aa3cd2f7693f04272330f9c9fd2b26
SHA1
3a16ade9bf1d77c570057f2482c88de28739a58c
SHA256
fdb6a4253570bc6140d7d61d0eda5839389d7951e86f9cd52f6fe91e43b3eb7a
SHA512
138cc6b8d55eb701ff7a031bc27d413b24e23ef5ff1c0d4f5d688c052b1c8367542cd8bf20d8c177e6b9f6ff52863e399d2413c498f1465b3bc13ef721769423
SSDEEP
98304:X3n56kyPmqw1lRe/J2RTsj+MX2ez0twLZHhX1/k:nn5jyPxs2JcglIKHhFs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fdb6a4253570bc6140d7d61d0eda5839389d7951e86f9cd52f6fe91e43b3eb7a |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ