LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
e8f6080c6537eb6bb5446192dc909e0cc6f10bb31f3b5aa7d5ab2a9b52f92682.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e8f6080c6537eb6bb5446192dc909e0cc6f10bb31f3b5aa7d5ab2a9b52f92682.exe
Resource
win10v2004-20230703-en
Target
e8f6080c6537eb6bb5446192dc909e0cc6f10bb31f3b5aa7d5ab2a9b52f92682
Size
920KB
MD5
351f2a9e94ffafe5cef981d9472f4d65
SHA1
385ac2b3cde2ef10da48b1c3d12e4673f2e5e675
SHA256
e8f6080c6537eb6bb5446192dc909e0cc6f10bb31f3b5aa7d5ab2a9b52f92682
SHA512
309692d02a2b67292ae8acc57b6631f2b8e7b88d73d4d81b2b745e5588d5f4239113c5944fb7ff6b61ab200da98041fbf14083f672fdf9a86b6c9adb47aabbc0
SSDEEP
24576:yTRRgkObgBSIirvyAm0ZZXu/EDG7PILY:yTznni807oEDGy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e8f6080c6537eb6bb5446192dc909e0cc6f10bb31f3b5aa7d5ab2a9b52f92682 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ