LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f5a5b00928c484367bc2b43d80a928fd69cfddc2a1bd9220291ba616ac7f2bf7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f5a5b00928c484367bc2b43d80a928fd69cfddc2a1bd9220291ba616ac7f2bf7.exe
Resource
win10v2004-20230703-en
Target
f5a5b00928c484367bc2b43d80a928fd69cfddc2a1bd9220291ba616ac7f2bf7
Size
2.0MB
MD5
a364e0a275acf5bcd5ebaf189eca8968
SHA1
84e34308232e654f2b6a624bf2a9e450f78934a3
SHA256
f5a5b00928c484367bc2b43d80a928fd69cfddc2a1bd9220291ba616ac7f2bf7
SHA512
91f2b2734d2917fd0232c4a7c2245fe87a03d145393051d6b2a2cc166894db8c77dd1e2b66b5fbff2e1bbcdccf9d2949eb47a29017274c3d692eb7fbb8a900d6
SSDEEP
49152:PAR6pHImCXi45lSevpEievzok5vkkcOgTSx9NGjBq5:PwI7Wl5Yei1UivxhoE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5a5b00928c484367bc2b43d80a928fd69cfddc2a1bd9220291ba616ac7f2bf7 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE