LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f8a675c9853cbae91d34a723f438cb3e88f452639959d3ec64656fdf7e61f623.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f8a675c9853cbae91d34a723f438cb3e88f452639959d3ec64656fdf7e61f623.exe
Resource
win10v2004-20230831-en
Target
f8a675c9853cbae91d34a723f438cb3e88f452639959d3ec64656fdf7e61f623
Size
2.2MB
MD5
3f8156418f996883d96d488fd1753122
SHA1
b0f4c29a263691f82b6b8c8bb14c14e5eabc59b4
SHA256
f8a675c9853cbae91d34a723f438cb3e88f452639959d3ec64656fdf7e61f623
SHA512
276be9bf01eb8e52e90fad96ce7309949f723ccde3ed93a914101de54dab21f98bf7e33011072514ffa75b6f86342d60350443b97e481098f5533481a4f5cf1a
SSDEEP
49152:BWBj/c9dIxYpMjJFdcUFcfaDiDByXO8cD/WRKdlNPtqtuXxNV4ENfL:HCEeYUyyD+ByXO8cD/WRalNmulFNfL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f8a675c9853cbae91d34a723f438cb3e88f452639959d3ec64656fdf7e61f623 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ