LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
7bbd857ae841361edd54a326816b2ae7c49a1fa5e7a3ac7ce866ec5a758f62a4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7bbd857ae841361edd54a326816b2ae7c49a1fa5e7a3ac7ce866ec5a758f62a4.exe
Resource
win10v2004-20230703-en
Target
7bbd857ae841361edd54a326816b2ae7c49a1fa5e7a3ac7ce866ec5a758f62a4
Size
1.6MB
MD5
06a816a73412cfc780270e60c45b205f
SHA1
194c3edff59602dc454432c02d61508c9095546a
SHA256
7bbd857ae841361edd54a326816b2ae7c49a1fa5e7a3ac7ce866ec5a758f62a4
SHA512
5f1a9adf544e38759b83a698204636bb533d4fc65947e8f1b20abddd1e47b1cf6c96b8184aaf623597be96a8b9dd90e558d29dff0bc537827c7566d39c90c4e6
SSDEEP
49152:EWBj/c/1KYq0tXrHVScZhxgFiRjEU3DD5T0:qP7VFnOiRjEUh0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7bbd857ae841361edd54a326816b2ae7c49a1fa5e7a3ac7ce866ec5a758f62a4 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ