LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f4386802811e958b1ec3a6d2ca9f071a4fe4282e8f91100d8802596166a3e1f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f4386802811e958b1ec3a6d2ca9f071a4fe4282e8f91100d8802596166a3e1f7.exe
Resource
win10v2004-20231222-en
Target
f4386802811e958b1ec3a6d2ca9f071a4fe4282e8f91100d8802596166a3e1f7
Size
602KB
MD5
1b47ca5ae4caea142ec89801298492a2
SHA1
7f85b991b3ad9b9dbba77b0ec040cd92deaf3d7c
SHA256
f4386802811e958b1ec3a6d2ca9f071a4fe4282e8f91100d8802596166a3e1f7
SHA512
0b21cf2b36b6f303d572e7a5741dc15c5cbb569800c7876bf758eb056903e455da05a3e6006adc0306794d155705bdaddf7387b9fa5793b3e39a7040d297f8df
SSDEEP
12288:4NVSegthIqepdMviQzePlMTzrQMOHOXnjI0cEcWivtYgMJfyJ7tF9Z:+VP4iQzePuruuXj/clhAfyJ39Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f4386802811e958b1ec3a6d2ca9f071a4fe4282e8f91100d8802596166a3e1f7 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ