LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
a7adc3e8d6abd3137e589c2b9b90c7906bd151927cae60a09f9c30adfed33c1a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a7adc3e8d6abd3137e589c2b9b90c7906bd151927cae60a09f9c30adfed33c1a.exe
Resource
win10v2004-20240226-en
Target
a7adc3e8d6abd3137e589c2b9b90c7906bd151927cae60a09f9c30adfed33c1a
Size
877KB
MD5
0678b88b20f503b254bb149ab0caaaa9
SHA1
2a30d79cbdb7ad3f28748bd02442f2dc42f36ae1
SHA256
a7adc3e8d6abd3137e589c2b9b90c7906bd151927cae60a09f9c30adfed33c1a
SHA512
343dc4d0b291fc2ac5ae43c649b16553f96e45f12f686d54819ef58cdceef688b53c2e43fec311fcc989f1be96c8b7de9a088b9da3e433c278800d81603bc385
SSDEEP
24576:O46141j2Y7Ie3/RoEka+IqwV8RtdGTWw0NPX:IYs8+Eka+V42d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7adc3e8d6abd3137e589c2b9b90c7906bd151927cae60a09f9c30adfed33c1a |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ