LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
6f9422975ae6f5ca6eeb5fa7756c5d3a0152b43e85fc7af0b6277cc69211ddd1.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
6f9422975ae6f5ca6eeb5fa7756c5d3a0152b43e85fc7af0b6277cc69211ddd1.exe
Resource
win10v2004-20231023-en
Target
6f9422975ae6f5ca6eeb5fa7756c5d3a0152b43e85fc7af0b6277cc69211ddd1
Size
3.0MB
MD5
dda0bbf17d5bb97c67129dac14c562dc
SHA1
2dfda06ca595f8cd86b1c22511ff038f69783c4a
SHA256
6f9422975ae6f5ca6eeb5fa7756c5d3a0152b43e85fc7af0b6277cc69211ddd1
SHA512
7b0759e894e1281e03d2c482ff04101c7b82e2b179dccc0172e364ff7dd1f831aa6176b8cd0a438c44c7876084dd48707d271c59d0f3014c647256337bf8e91c
SSDEEP
98304:Cz9zFDtdvrpuZaQSEOCK3lVwDnIoCZ8xy:C9u4Z7ID1CZH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f9422975ae6f5ca6eeb5fa7756c5d3a0152b43e85fc7af0b6277cc69211ddd1 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ