LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f0ee78aff578525969d96017308c88c666406f235d809b06e75b83101e50450d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f0ee78aff578525969d96017308c88c666406f235d809b06e75b83101e50450d.exe
Resource
win10v2004-20231222-en
Target
f0ee78aff578525969d96017308c88c666406f235d809b06e75b83101e50450d
Size
4.5MB
MD5
8eaf3291a177ff759f7fe8063c955ac1
SHA1
c2f3a8ffbdfadfad74bb860350ad9d774fc86f2b
SHA256
f0ee78aff578525969d96017308c88c666406f235d809b06e75b83101e50450d
SHA512
68a09f0178cb5fe0363f43f79813c3b9a61a48eeb1aa4aa26abd2b2a9fded6467ab15b1b5bfe7e76e66f73703029208dbe5a83dadbe9228bc4aa246e4c039872
SSDEEP
98304:ewI7Wl5Yei1SAvxhoEMvviCLvxZ1K1YH/DlQvrBf7nGazCrMpN62aVbF:ewrl5ktfoEM3igZO2H/ZQzt7noY6LVbF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0ee78aff578525969d96017308c88c666406f235d809b06e75b83101e50450d |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE