LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
e955a68be73c72bcf872f3941f94f3682a4c463230947bd3f50fe66b44ba9415.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
e955a68be73c72bcf872f3941f94f3682a4c463230947bd3f50fe66b44ba9415.exe
Resource
win10v2004-20231023-en
Target
e955a68be73c72bcf872f3941f94f3682a4c463230947bd3f50fe66b44ba9415
Size
4.7MB
MD5
13ff2debc6c7748ff3224d248c60c17d
SHA1
89bc56910e2d37b9f458cf50965f84c3b2c83b5d
SHA256
e955a68be73c72bcf872f3941f94f3682a4c463230947bd3f50fe66b44ba9415
SHA512
2e5ebc99e62355da9362e810b6dc46aa5276edcf6754a16afae47b5809cd95d5e3e203a6c5bb692f28a1e5765345698718ce9aeccd70b610afbebdb0c8c6022d
SSDEEP
98304:cnnidRBk0BWmz8r7V9mgZ4C7mBbO4EcO1E4RFRnHSByobcrv+fk0cG:7nBWmz8r7qA4KmVO4YmiFJyMpUkG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e955a68be73c72bcf872f3941f94f3682a4c463230947bd3f50fe66b44ba9415 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ