LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
0c2f1f324a4f6e72d3b1be815e2a209e21960ec4c6d698731c69a8c194bbcfb6.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0c2f1f324a4f6e72d3b1be815e2a209e21960ec4c6d698731c69a8c194bbcfb6.exe
Resource
win10v2004-20231020-en
Target
0c2f1f324a4f6e72d3b1be815e2a209e21960ec4c6d698731c69a8c194bbcfb6
Size
2.8MB
MD5
ad93e4b3a5f6795a688a0db5e9e0a240
SHA1
19a1e8280d5edfcfe1bc301536eef2dc46bbbd53
SHA256
0c2f1f324a4f6e72d3b1be815e2a209e21960ec4c6d698731c69a8c194bbcfb6
SHA512
b3effd51800b0d7e6f023d82e8c0a638a59a8a3e313010955cfc03a2fd33a7a292b6361e9e58d8323e9d82537069067bbe289b13f45b3b591e58c7dc2de51f4c
SSDEEP
49152:JWBj/cBVIEgdE0XwwYBNx7uI8RcP35XFgJPb6LmP1yuW1N6+/7VY3aLlIku:KXc8Rq7gJZkuaNx/7zHu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c2f1f324a4f6e72d3b1be815e2a209e21960ec4c6d698731c69a8c194bbcfb6 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ