LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
7a9a76e65d908ebf1562cbd3621a0675b67c2f30c4943b9661e769a88512f584.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a9a76e65d908ebf1562cbd3621a0675b67c2f30c4943b9661e769a88512f584.exe
Resource
win10v2004-20231222-en
Target
7a9a76e65d908ebf1562cbd3621a0675b67c2f30c4943b9661e769a88512f584
Size
2.3MB
MD5
181334e15bd52877a22029d76ed3f2a2
SHA1
dea57dba8a91da9f572389b9fd7036eb0ba5e547
SHA256
7a9a76e65d908ebf1562cbd3621a0675b67c2f30c4943b9661e769a88512f584
SHA512
6f9e786791276cf13bfc42eb769d4945dadd63cf525b52d71fc8857bd4630f31a3a10de76240e4b8c186027183e88448cc972b7aefa7dc6ceb2726d87150c5c6
SSDEEP
49152:aWBj/cXmqyAKvD+m6Kt5LiOb4CynlZWWTBQ6VqQqMsTbLf2Jcz:FESVDWflZWWBFY2W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7a9a76e65d908ebf1562cbd3621a0675b67c2f30c4943b9661e769a88512f584 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ