LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
b7f38648c4ef3f2bcb117eb628e8161f92b1c1175bd89b03b3b4a84b1053d96a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
b7f38648c4ef3f2bcb117eb628e8161f92b1c1175bd89b03b3b4a84b1053d96a.exe
Resource
win10v2004-20231023-en
Target
b7f38648c4ef3f2bcb117eb628e8161f92b1c1175bd89b03b3b4a84b1053d96a
Size
2.0MB
MD5
b737329a961c17807d189bfb7a4b077d
SHA1
aaeada8df89e0222160feee853fa04900bb7c6df
SHA256
b7f38648c4ef3f2bcb117eb628e8161f92b1c1175bd89b03b3b4a84b1053d96a
SHA512
b659c97d661dd4d21392a6ef2102b947795578a8bd0fe2b12243b40d8121f37607bbd7f31934ddae59c61969f68ae94b16e891c3fe16db8817d6770ca5d2a03d
SSDEEP
49152:JTznniYdCC1lGmIP8RAmYjv+ReOMm5sB+qWC3lV0S:JnniGzc8RQSEO9Y3lV5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7f38648c4ef3f2bcb117eb628e8161f92b1c1175bd89b03b3b4a84b1053d96a |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ