LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
e1ee50e6704da4a519082e455f8e05d7ce6bd8b7943333e45b8cc1339ce4e2c9.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
e1ee50e6704da4a519082e455f8e05d7ce6bd8b7943333e45b8cc1339ce4e2c9.exe
Resource
win10v2004-20231025-en
Target
e1ee50e6704da4a519082e455f8e05d7ce6bd8b7943333e45b8cc1339ce4e2c9
Size
3.7MB
MD5
f07d91e6424e39595afd6f62f8f6c2e6
SHA1
ef0e5f5a272e5e0403f7893ce74bb9590826505b
SHA256
e1ee50e6704da4a519082e455f8e05d7ce6bd8b7943333e45b8cc1339ce4e2c9
SHA512
8c2442c86cd860f74508cd60fbb677ac753491f4f1840703fee07fe1ba4e27ffcd0f8825615d0c804e77eaf4181084065c5799e4a24f54a3617b7604d8f97069
SSDEEP
98304:xnniL+ttv3uHfYOmy40z6h4s+lrIdVT8n:jttv3Mf1my4U6hb+lrI78n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1ee50e6704da4a519082e455f8e05d7ce6bd8b7943333e45b8cc1339ce4e2c9 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ