LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
3fb475f0a48cb0fc40e397f0fcb3210751949c5fe26e8ecc6b1d411a710edc8b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
3fb475f0a48cb0fc40e397f0fcb3210751949c5fe26e8ecc6b1d411a710edc8b.exe
Resource
win10v2004-20231023-en
Target
3fb475f0a48cb0fc40e397f0fcb3210751949c5fe26e8ecc6b1d411a710edc8b
Size
3.5MB
MD5
62d1ea79e2a47a82b369497452b35709
SHA1
15a3cb525a74d33e4b567696a6e2e3e134cedc9e
SHA256
3fb475f0a48cb0fc40e397f0fcb3210751949c5fe26e8ecc6b1d411a710edc8b
SHA512
e57173f60b715cc3c089f3be3cb1441c93f51157e9f064dfba6bce48bc139c0eae118faae1c725519fe2d4c88834beb1d97fcd304a1bc477a29ece35505cc344
SSDEEP
98304:2+HVb4W8+A90IplrOzMZ8jbOGsk1IZ2d2:2+HJ8p9PlKzDyGX1I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3fb475f0a48cb0fc40e397f0fcb3210751949c5fe26e8ecc6b1d411a710edc8b |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE