LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
14742f337ba41c1187a4c6c25d3fddd4e15ed453bffded8ba4c22ec482e9fae6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14742f337ba41c1187a4c6c25d3fddd4e15ed453bffded8ba4c22ec482e9fae6.exe
Resource
win10v2004-20240221-en
Target
14742f337ba41c1187a4c6c25d3fddd4e15ed453bffded8ba4c22ec482e9fae6
Size
9.6MB
MD5
dd0efc37b67fb0a9693d42e1141c6d51
SHA1
d6f48a48121434b4a610293ae4e9cca1f5e68d2a
SHA256
14742f337ba41c1187a4c6c25d3fddd4e15ed453bffded8ba4c22ec482e9fae6
SHA512
0a33dab2a0fa1dd6d6d37970e8b7d3743384d219be51b61f83f37ed61a74dd1497c4f7a7ef8743a8c9d21c62bb819443395860a6105a2d65546760dea8c132cc
SSDEEP
196608:MzNb2NVxV2VlVJZh3f9jD+F1Kcq2xPdzo2Num/6XWhVNDTwfc7hbFxA:+Nb6xV2Vnzh31WicqMhSWhVNDacb+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14742f337ba41c1187a4c6c25d3fddd4e15ed453bffded8ba4c22ec482e9fae6 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ