AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
442ca888a956098037b698a57ae7fc5d04ea1e18f6df511b968f9be41ee6444d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
442ca888a956098037b698a57ae7fc5d04ea1e18f6df511b968f9be41ee6444d.exe
Resource
win10v2004-20230915-en
Target
442ca888a956098037b698a57ae7fc5d04ea1e18f6df511b968f9be41ee6444d
Size
1.9MB
MD5
42b9934cd64b18105591a64f2ef7c90c
SHA1
d64ba7a8e1491ec23fd0c309921cc1be89eae830
SHA256
442ca888a956098037b698a57ae7fc5d04ea1e18f6df511b968f9be41ee6444d
SHA512
7ab57e58610942240f444e1677aced1d52d190d326d8ce8ca1243da572c60ac79cdfaeee5d75a242945b0c49ff076ff7d1e49c84f5c4f6fd49b981e7425905af
SSDEEP
24576:VSFtyG+qygvXgvGbP9Gl++JaPghrXSwrak1VpsT6Qctnc2J4wvX5E7fJ:styG+qbFrYAoaPWnrak1VpK6/Tf5qf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
442ca888a956098037b698a57ae7fc5d04ea1e18f6df511b968f9be41ee6444d |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ