LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f5f61c67cfe127b2a1a3a46cdec265188cbeb2e07f0909b773541bd18089ada0.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
f5f61c67cfe127b2a1a3a46cdec265188cbeb2e07f0909b773541bd18089ada0.exe
Resource
win11-20240214-en
Target
f5f61c67cfe127b2a1a3a46cdec265188cbeb2e07f0909b773541bd18089ada0.exe
Size
10.5MB
MD5
17d2000055d0230eb3325fb9b245826f
SHA1
1136d28faaa1d3f4a06e9ce451ff71554b9a1b8a
SHA256
f5f61c67cfe127b2a1a3a46cdec265188cbeb2e07f0909b773541bd18089ada0
SHA512
7d9f3e8bf406d8d11c5cafecf98dba7b12ef79c1c314e27fbaded686f72a32949271b5c74bd92f2eb558da54c57ceb5779cc1b031f19c69ae2f13fe14479811a
SSDEEP
196608:C1NlgmneRrwSKmg7gvNV1CFk8NN9YgXM9o2yPXQfmJdtA5HTDnz8d:ntrHXLV1kvNXM9gg6dIXA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5f61c67cfe127b2a1a3a46cdec265188cbeb2e07f0909b773541bd18089ada0.exe |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ