LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
ed0b50b8365e2245ab9847c4953308920d046e1cc04a9da25ef3b2d70b58d359.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ed0b50b8365e2245ab9847c4953308920d046e1cc04a9da25ef3b2d70b58d359.exe
Resource
win10v2004-20230915-en
Target
ed0b50b8365e2245ab9847c4953308920d046e1cc04a9da25ef3b2d70b58d359
Size
5.8MB
MD5
b8c6665de9584900af09b2203838769c
SHA1
d1ade435f11b3658d3e9264b77b066f6e8b21e5b
SHA256
ed0b50b8365e2245ab9847c4953308920d046e1cc04a9da25ef3b2d70b58d359
SHA512
285ccc7bf27c32b0656723805baff11b3ded114b55f3964411bf9b80a13b85d3b8b064a82e3531581b5c1c7f40ce1577eab32778568e6a59c8138beb41356632
SSDEEP
98304:EQGuyUu0yO+3ne3EF/F2MUvn/lSAeRGRhmxbfjg+QunSw5yqEFUUYwi5LTj8+vOa:EQFyUVNIF92Bv9SPsAxI+9STqEQP4+v5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ed0b50b8365e2245ab9847c4953308920d046e1cc04a9da25ef3b2d70b58d359 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ