RegisterDialogClasses
ScreenSaverConfigureDialog
ScreenSaverProc
Behavioral task
behavioral1
Sample
2512743bbe566ada870806b78dc79d8781656caabe62be56d26c5b6bc08caa55.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
2512743bbe566ada870806b78dc79d8781656caabe62be56d26c5b6bc08caa55.exe
Resource
win10v2004-20231023-en
Target
2512743bbe566ada870806b78dc79d8781656caabe62be56d26c5b6bc08caa55
Size
66KB
MD5
08c93c646d670dc49ddbc92ef4353fa7
SHA1
50c6ebe340e8b3d7923d58ce36560cbe3e1466a4
SHA256
2512743bbe566ada870806b78dc79d8781656caabe62be56d26c5b6bc08caa55
SHA512
c71b2b103c98ae0d359edc9486fcecfa217aae197986add9345c8f4e499c80de008dacf17fb2b0a09dc03670186f7194689674f7a2235546e923375e7d7e19b3
SSDEEP
1536:fFJQZNOXoznwp9FI9++RS4yMSOTKLHgp0u26:NJQZN4Cwp9FI9++RS4yMSOToQZ26
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2512743bbe566ada870806b78dc79d8781656caabe62be56d26c5b6bc08caa55 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegisterDialogClasses
ScreenSaverConfigureDialog
ScreenSaverProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ