LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
f923319f4275f5b8c63f1b2a99bb9ee216ab52940ab5be614d748617b03deb6a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f923319f4275f5b8c63f1b2a99bb9ee216ab52940ab5be614d748617b03deb6a.exe
Resource
win10v2004-20231127-en
Target
f923319f4275f5b8c63f1b2a99bb9ee216ab52940ab5be614d748617b03deb6a
Size
3.7MB
MD5
afc0f5caaee7067bb4e6fd2cf81085ba
SHA1
6740e8677696471c9edc64932dc02b5203cf676c
SHA256
f923319f4275f5b8c63f1b2a99bb9ee216ab52940ab5be614d748617b03deb6a
SHA512
4dabfa675aa5dc6ed3d8d5c283ba977483a46887789546d46a5045ec0a890890966bb21c09b7349c01e46d81c9bda37f04634487b35765eb3d62989a04f14bab
SSDEEP
98304:oz9zsRGL7PaUtzMPSAkf4hMs/iEGjg0Blr:o/7bzeSAWs/iFE0B
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f923319f4275f5b8c63f1b2a99bb9ee216ab52940ab5be614d748617b03deb6a |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ