LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
54737197f32600e267686015593c087855f008c392fd203f3b8c3971a4037cf6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
54737197f32600e267686015593c087855f008c392fd203f3b8c3971a4037cf6.exe
Resource
win10v2004-20230703-en
Target
54737197f32600e267686015593c087855f008c392fd203f3b8c3971a4037cf6
Size
952KB
MD5
a4f86520a2f974196c8a3b7b046c09ef
SHA1
94b050394ba9a35da9e8d21150ce0ce423e84808
SHA256
54737197f32600e267686015593c087855f008c392fd203f3b8c3971a4037cf6
SHA512
059565d54f1034a529fbc5e11b7f6226055ee352312a846088c6a607140b08f2e5596e784a8078e424d3516e8816033737b853cd33f93179123b9ba5048c12ee
SSDEEP
24576:DpEi9kazoh8R3I9aRtZG1MO4EasFmYT2c:DpEieazok49aXZmMAm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
54737197f32600e267686015593c087855f008c392fd203f3b8c3971a4037cf6 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE