@@Myworm@Finalize
@@Myworm@Initialize
_Loader
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
521a49baa6ea6d02fd0ee5e52ad9aa95.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
521a49baa6ea6d02fd0ee5e52ad9aa95.exe
Resource
win10v2004-20231215-en
Target
521a49baa6ea6d02fd0ee5e52ad9aa95
Size
253KB
MD5
521a49baa6ea6d02fd0ee5e52ad9aa95
SHA1
c9deb3b224c117c09b0a876ff32813f06f10b5f4
SHA256
6dc7db2a6a067ae849155007d85be2897bf6822bf725088b258f596ae42a9c28
SHA512
5dd3e4e8f67b567a49635348ce1cd286b9cac69b85651ca15b77fe302852920f1802e01d19608631e529fa1d0b2e34563f0fb9894d8408415bfd4553f3d498a0
SSDEEP
3072:Qlq0zeF617JZd2KPyHQUvxmW82qrAW9vyMs9+dAnU92IXzrBQse2uxsFsnLrEAw/:QQErZdBiQU5fs12+2m2IXz/eTkFb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
521a49baa6ea6d02fd0ee5e52ad9aa95 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Myworm@Finalize
@@Myworm@Initialize
_Loader
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ