LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
64e52ad5232712a17e6d8522d2d9b3d9998874fb8e4d807b3f253d914a36f419.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
64e52ad5232712a17e6d8522d2d9b3d9998874fb8e4d807b3f253d914a36f419.exe
Resource
win10v2004-20231025-en
Target
64e52ad5232712a17e6d8522d2d9b3d9998874fb8e4d807b3f253d914a36f419
Size
1.3MB
MD5
8429d7bc806b7f9d4f5821c147e7b655
SHA1
51d4dd37fb0bb83b9be58aafd96d5e2997ce9347
SHA256
64e52ad5232712a17e6d8522d2d9b3d9998874fb8e4d807b3f253d914a36f419
SHA512
6ec82e1716b24d9421d205cddbde5c0d4da2a787f85a5cdcc4d1eeea0f82a108c85aa8a3e053ad41b1be03a1626b713fc3d0c856530ec5e1c1bbd4c928e3fed3
SSDEEP
24576:MVP4iQzePuruuXj/cXru7QZNjL9Qs7TwLyJierVDUvFWTsbGLxP9rMfhFT9t:MWBj/cXru78j2qnd5BI61+Fxt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64e52ad5232712a17e6d8522d2d9b3d9998874fb8e4d807b3f253d914a36f419 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ