LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
3b8418a44dc0394390fe7c399387ae94e7cc6f932d9dbe2efcf42d06cdf5f8a4.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3b8418a44dc0394390fe7c399387ae94e7cc6f932d9dbe2efcf42d06cdf5f8a4.exe
Resource
win10v2004-20231127-en
Target
3b8418a44dc0394390fe7c399387ae94e7cc6f932d9dbe2efcf42d06cdf5f8a4
Size
2.7MB
MD5
80dd3bf411034cd2f91a90aa94581b20
SHA1
317aeca7de49c6b5afab22a8b120164036bcd199
SHA256
3b8418a44dc0394390fe7c399387ae94e7cc6f932d9dbe2efcf42d06cdf5f8a4
SHA512
b7fcfd6d3de246e844e6cee6cb018f2a4e9a3d887cb8aca633005a0a4aab2cd0d8f770532d0e0ecbe2865988cde890feb2dc2c22c3096fdc1a1356c66aba7dd4
SSDEEP
49152:pWBj/c4UCV/NUfU/sklX5bRwbBDIOn+E+FflsurxkYo4AK2sbH:6LV/EhwbkBkgn+F9surxkYoja
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b8418a44dc0394390fe7c399387ae94e7cc6f932d9dbe2efcf42d06cdf5f8a4 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ