LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
88a06cdc2541b537d3e429342fa641b7e5b0c24901441516fce608a5225c1e9c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
88a06cdc2541b537d3e429342fa641b7e5b0c24901441516fce608a5225c1e9c.exe
Resource
win10v2004-20231215-en
Target
88a06cdc2541b537d3e429342fa641b7e5b0c24901441516fce608a5225c1e9c
Size
3.7MB
MD5
c5396c3c0d8635d3fcf50621df6493f1
SHA1
45d04561a38347af021213d1d85ce6807ab5427a
SHA256
88a06cdc2541b537d3e429342fa641b7e5b0c24901441516fce608a5225c1e9c
SHA512
1983fc846ed935323d30a256f6e2b34a23ce4bd72d93c63b42a13f5d8d3a4b82e7fed7ae13bfdd0a4c270d0dc20cd9791ddb65f59343d19c7d8b7c0673ce5f25
SSDEEP
49152:AWBj/cj1Gyr6l6Mftq3WBd+D9s0x/EJZunyWj39QFDxprJYaRKNgTG9Hwkd3j:wxOlBaWGDT1EJcnDJQBPCaQNV3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88a06cdc2541b537d3e429342fa641b7e5b0c24901441516fce608a5225c1e9c |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ