LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
5b237ac5abdff2cf6cd8571dcdf3b3f07c50bc12a1cc1b22074ddaaafe999369.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5b237ac5abdff2cf6cd8571dcdf3b3f07c50bc12a1cc1b22074ddaaafe999369.exe
Resource
win10v2004-20231023-en
Target
5b237ac5abdff2cf6cd8571dcdf3b3f07c50bc12a1cc1b22074ddaaafe999369
Size
3.1MB
MD5
5ab975d1a82e23cb3db4ded01554868f
SHA1
f1f92070685d36efccfd33ea87ad681a5ccb566b
SHA256
5b237ac5abdff2cf6cd8571dcdf3b3f07c50bc12a1cc1b22074ddaaafe999369
SHA512
ca4a0e86ed03cbc1c32ec56d5a349f763701e6af2e2d11c43fedf2dcad08dec3969c3db01b6eac82838f56cce3712af0022218cfc4eb6cfcb11726df576506e6
SSDEEP
49152:bTznnisXc8rmSurPDkPMZHuiYMNQBxyeYgvMH7/wZ8kWJXKDiz9+pISwl7/zCia:bnnisxoQeHfYOmy40z6h4s+lr4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5b237ac5abdff2cf6cd8571dcdf3b3f07c50bc12a1cc1b22074ddaaafe999369 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ