LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
3b0dd96d29647ecc775955218358e1126e3c9beaf052dcda439cd6d32caca765.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b0dd96d29647ecc775955218358e1126e3c9beaf052dcda439cd6d32caca765.exe
Resource
win10v2004-20240419-en
Target
3b0dd96d29647ecc775955218358e1126e3c9beaf052dcda439cd6d32caca765
Size
3.4MB
MD5
d5fc2e0fae48eaaace9f76dd02c5edb5
SHA1
7e758e7beeb187472c99401f0faafffff28a1093
SHA256
3b0dd96d29647ecc775955218358e1126e3c9beaf052dcda439cd6d32caca765
SHA512
642c80da7186f5f3987fb3d277fef6ae9dc76fbd4766d3e0cf95440ead4dfbe54a1b53ca71a8d427a806fdb67f78eb2ae8c7d3191c88fdda8ca9327cebd6ab83
SSDEEP
49152:WYs8+Eka+V4GlmiNqD+P+pMHliL41sYwZUkFcSSVNwfdXYVIWq9zxb8uByZVJJCW:Ww+EGV4GAIrlmcmcSSVNwF6oWuBKCVE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b0dd96d29647ecc775955218358e1126e3c9beaf052dcda439cd6d32caca765 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ