LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
64e18144f2056081bf9fb12aeb495b1ccca68c4447f58c71104d8ac300a0aa2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64e18144f2056081bf9fb12aeb495b1ccca68c4447f58c71104d8ac300a0aa2e.exe
Resource
win10v2004-20231215-en
Target
64e18144f2056081bf9fb12aeb495b1ccca68c4447f58c71104d8ac300a0aa2e
Size
4.5MB
MD5
3686fd403118ae2d9106c6c566f35b51
SHA1
6e9c6465e28dfe1c2ea93181e4dd09920f814043
SHA256
64e18144f2056081bf9fb12aeb495b1ccca68c4447f58c71104d8ac300a0aa2e
SHA512
4b68ea395c986ab47b4b88954f71d0d0e831bd2f2b7f58a11b4d1656ae686c61fd4517e4b3ef69ab4bf375e7ccc81c1c4fb62148d55945355a53bb7d3ec5a644
SSDEEP
98304:rcLK0bcJohh7wFrgbnwuwISGysZSaVIdqQbvUo8vQK3LhP7e7HzH0GBKIQ:rcOPohSqnAISGtZFVINzUoyQ+p7enH0O
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64e18144f2056081bf9fb12aeb495b1ccca68c4447f58c71104d8ac300a0aa2e |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ