LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Static task
static1
Behavioral task
behavioral1
Sample
015d5d92e8604312f0eeef1dce631ed8eddbd7a4c94a7a8653291d93b730fd96.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
015d5d92e8604312f0eeef1dce631ed8eddbd7a4c94a7a8653291d93b730fd96.exe
Resource
win10v2004-20240226-en
Target
015d5d92e8604312f0eeef1dce631ed8eddbd7a4c94a7a8653291d93b730fd96
Size
3.4MB
MD5
5b375982b24d7f2f5a25080b3661937c
SHA1
6ab599b024d040b8985f2260e1bd3904a4cbf61f
SHA256
015d5d92e8604312f0eeef1dce631ed8eddbd7a4c94a7a8653291d93b730fd96
SHA512
560962d38337432fed88d388db7cdd0b84a317e678194b4ba2482cb049d86f42d36669368155d1d3b7aef7432275f66aec3e0d1312dee85adc85903174cf50b8
SSDEEP
49152:KHWAyM0LI9Im6a+H10dcb2muQH10dcb2m4:55E9IiRhmuXhm4
resource | yara_rule |
---|---|
sample | UPX |
Checks for missing Authenticode signature.
resource |
---|
015d5d92e8604312f0eeef1dce631ed8eddbd7a4c94a7a8653291d93b730fd96 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ