LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
b88a61d4280edddbea6b458cde3772d8345095cfccae9ebca0a6a03e9687cc7e.exe
Resource
win7-20230831-en
Target
b88a61d4280edddbea6b458cde3772d8345095cfccae9ebca0a6a03e9687cc7e
Size
2.6MB
MD5
704f99ae54419e5b5f050772b6b59890
SHA1
f0131a0ffb8fa518151f6918ce95b9bed1470395
SHA256
b88a61d4280edddbea6b458cde3772d8345095cfccae9ebca0a6a03e9687cc7e
SHA512
9ef92d13ed50b90d3b3ba37b3121bef7c28a71369959f39664f88577911e68a263e554e3f7e1548ee4a910be5e63ccef56c9c360c6f4a07f678e4281ddcf126e
SSDEEP
49152:sWBj/cNczsZbEqHhVGvWp63w/IFwh3Xo3Imm1A22GmNQvqpveq4tGc:McNiGvDwQGhniImMPrvqpmqJc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b88a61d4280edddbea6b458cde3772d8345095cfccae9ebca0a6a03e9687cc7e |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ