LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
38235b6870ae2ad3740f7b3822912004155a8c2c29596af8203b0a12b4d1bede.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
38235b6870ae2ad3740f7b3822912004155a8c2c29596af8203b0a12b4d1bede.exe
Resource
win10v2004-20231020-en
Target
38235b6870ae2ad3740f7b3822912004155a8c2c29596af8203b0a12b4d1bede
Size
2.3MB
MD5
56b8a42915536e0298ddcfa110fafe6d
SHA1
8920231d1200e29f520278a77ec778483ebda3d8
SHA256
38235b6870ae2ad3740f7b3822912004155a8c2c29596af8203b0a12b4d1bede
SHA512
3b70aa5d42c70a04bd76a799e0042fe37b80f51847c64c29b0fd1c27da475873c43a2c582447e103553854f50ea8bae5e89dfd62544ebbc09324f24bc5af5f8f
SSDEEP
49152:rWBj/cIBkAxiLIs1aNP2cmkthFvcgFGomm/uRavOS3:8kp8s1aNP7RNcHomCuYvr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38235b6870ae2ad3740f7b3822912004155a8c2c29596af8203b0a12b4d1bede |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ