LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
0dd72ea728d400a396cea1cab85dcbe2e87efa46220889808cc1196b2d1cb0ff.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0dd72ea728d400a396cea1cab85dcbe2e87efa46220889808cc1196b2d1cb0ff.exe
Resource
win10v2004-20231020-en
Target
0dd72ea728d400a396cea1cab85dcbe2e87efa46220889808cc1196b2d1cb0ff
Size
15.7MB
MD5
b9119beca0ea40190e006cfc2ac93d05
SHA1
18218c00677ec3da3855cd07903ad0f0ca947177
SHA256
0dd72ea728d400a396cea1cab85dcbe2e87efa46220889808cc1196b2d1cb0ff
SHA512
3ca01009c38d2afc5cc00b15266547c399f2f342007d39eab527ff093284e6f49a78ddbf4a02b7c3b41eb83dafc17088ac3a18e2b0039e16ee69975474ea64a7
SSDEEP
196608:c+6j2RmGguNvNDLUl1DC41M+ygJm5Vi9I9Le7aTN0KgV9+EmbNE9O17Q6DelN3nS:ch2x1ePcombiSc7wIVYNWYkEqnCiC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0dd72ea728d400a396cea1cab85dcbe2e87efa46220889808cc1196b2d1cb0ff |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ