LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
6dd6fcb57ffa8adb1112d21aed669a9ca00ecc9ed530c235b8dfc97f2e7047ba.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6dd6fcb57ffa8adb1112d21aed669a9ca00ecc9ed530c235b8dfc97f2e7047ba.exe
Resource
win10v2004-20230831-en
Target
6dd6fcb57ffa8adb1112d21aed669a9ca00ecc9ed530c235b8dfc97f2e7047ba
Size
1.6MB
MD5
035d55ce8a6c2667c4ad0e62ff38a414
SHA1
d22bafc2a33f51b23ffe9d7daeae2bf6bc081aaf
SHA256
6dd6fcb57ffa8adb1112d21aed669a9ca00ecc9ed530c235b8dfc97f2e7047ba
SHA512
66416ae92444730e0740627774cd8b7b037d0b504e7fcb8f801b452360c75b6850612ddb663159171c1631cb6c927f2e3abbd2640d0405e1ba490f8b073d189d
SSDEEP
24576:gVP4iQzePuruuXj/cFB09tglNCPl/iTI/KxkqX69mxM0m5Mjb0xXiviso4zN2A:gWBj/cD09tgOPlcIi6ymQ0tivdzN2A
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6dd6fcb57ffa8adb1112d21aed669a9ca00ecc9ed530c235b8dfc97f2e7047ba |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ