LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
8cbca42f58ad04b23cadc3c9f23d32290ab8e44d3bc2858e91def973233c20ea.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8cbca42f58ad04b23cadc3c9f23d32290ab8e44d3bc2858e91def973233c20ea.exe
Resource
win10v2004-20230703-en
Target
8cbca42f58ad04b23cadc3c9f23d32290ab8e44d3bc2858e91def973233c20ea
Size
2.0MB
MD5
43d0bce004da2dde7dc89d1f1da42084
SHA1
c792de00c2d52707d4a576b0108adf8cafd2fc48
SHA256
8cbca42f58ad04b23cadc3c9f23d32290ab8e44d3bc2858e91def973233c20ea
SHA512
a467daea4ea9593c96bd44ee0b377c55dc3fb00a9857cc1b8fdc8ff629e70570d3563594fa09f2e871241ef60b2be2ae9a5a312f91ed1a2fa6a057da786e6e57
SSDEEP
49152:UAR6pHImCXi45lSevpEiemzok5vkkcOgTSx9NGjBq5Z:UwI7Wl5Yei1FivxhoE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cbca42f58ad04b23cadc3c9f23d32290ab8e44d3bc2858e91def973233c20ea |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE