LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
0d935beb3fd57516f2dde6eac99c218b96c012bdac4835d4e0fa37abf256c0e9.exe
Resource
win7-20231215-en
Target
0d935beb3fd57516f2dde6eac99c218b96c012bdac4835d4e0fa37abf256c0e9
Size
4.4MB
MD5
c02be379b5696fb71c20e4358b99b5cd
SHA1
1655ca64ddd6c7ffbe1f705061f848bf31ceff59
SHA256
0d935beb3fd57516f2dde6eac99c218b96c012bdac4835d4e0fa37abf256c0e9
SHA512
c087396bc2ceaa70ac33e00da6cb6494822d4479a1b349c7b9131d58aed8da59d9afb5bc04ea2e379d0dacb79626edb7c4edc50c61bb77e74cd80c6bc46486f2
SSDEEP
49152:jWBj/c0PMjCKgVlP8eLbG564ZxxlA28OeJShUUw3QqZuTEQD5aOpbzDUXmX1s9uG:7qUeOzZxxleJShy3rdQlrbzDUWXQ+4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d935beb3fd57516f2dde6eac99c218b96c012bdac4835d4e0fa37abf256c0e9 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ