LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f1c2606f3ba280da23457bdc719b09911c91e3c39b11d53db7fc2e600aa9d814.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f1c2606f3ba280da23457bdc719b09911c91e3c39b11d53db7fc2e600aa9d814.exe
Resource
win10v2004-20231020-en
Target
f1c2606f3ba280da23457bdc719b09911c91e3c39b11d53db7fc2e600aa9d814
Size
3.3MB
MD5
87bda818f7d1a74349319721cac2d5ad
SHA1
edaa95b677db07a29405d92b95570b035d0fbc94
SHA256
f1c2606f3ba280da23457bdc719b09911c91e3c39b11d53db7fc2e600aa9d814
SHA512
b3f408c623a01acccb3dc32212e5baa71f9a20587f546887e6941b50bacc6db2eedb42898e7ede251b690225ef60f60a74eee145c78cc50f8c28e4a1182fdb07
SSDEEP
49152:bTznnisXc8rmSurPDkPMZHuiYMNQBxyeYgvMH7/wZ8kWJXKDiz9+pISwl7/zCiat:bnnisxoQeHfYOmy40z6h4s+lrId7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f1c2606f3ba280da23457bdc719b09911c91e3c39b11d53db7fc2e600aa9d814 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ