LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
67feb0ce2b00313fb5917e5e11602dbf109134d85281245cb47a47fe6269ae02.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
67feb0ce2b00313fb5917e5e11602dbf109134d85281245cb47a47fe6269ae02.exe
Resource
win10v2004-20230915-en
Target
67feb0ce2b00313fb5917e5e11602dbf109134d85281245cb47a47fe6269ae02
Size
429KB
MD5
f1d4311e6528ef499580e40d4e09b6b7
SHA1
18c09beef46c9a7899dc0611c8f112cdc0f0ed77
SHA256
67feb0ce2b00313fb5917e5e11602dbf109134d85281245cb47a47fe6269ae02
SHA512
8de4ab7fc288204ae7a4952bd1354adbf48362d2b98057c3dca7c1e569c5e8c5c096ac83d20906a93a66051f8a41ea570f0c769bfe0c4c9e8710b1d604d36ba0
SSDEEP
6144:1PcOHwCEhJmEgzZIdQc7+IZv/bbAkObgB91xMBsR/32bk3SaCzf9QXprjPZ8ka/P:uTaZZcvZb0kObgBPSi2bwSaCraJakIp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67feb0ce2b00313fb5917e5e11602dbf109134d85281245cb47a47fe6269ae02 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ