LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f8df834eb23235db0652c666725e65328ad2f019e51c359eed08fbbbe5cf4cbd.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f8df834eb23235db0652c666725e65328ad2f019e51c359eed08fbbbe5cf4cbd.exe
Resource
win10v2004-20231023-en
Target
f8df834eb23235db0652c666725e65328ad2f019e51c359eed08fbbbe5cf4cbd
Size
4.8MB
MD5
772acb7345d45e8e559eaa807243cf53
SHA1
888a15035f8b855b7249dcb2006b47079b739b7a
SHA256
f8df834eb23235db0652c666725e65328ad2f019e51c359eed08fbbbe5cf4cbd
SHA512
d37ef47453ee10fc9d383196d5d1befd902cf7b1e9471962e4e41cf72b1fff0e39b30540af2a1d05d9065c2c96f13a9975f282b1354d94fa68405e61ed472dd9
SSDEEP
98304:anni3ju01w5FX3rJH54hxNtHLWehIWt6IxfCq:f601AFHrJZ4DLHCehIWt6I7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f8df834eb23235db0652c666725e65328ad2f019e51c359eed08fbbbe5cf4cbd |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ