LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
4d8160a1f8f5d522e27ef97da917f6d20c33c12387da254728d45871737dac56.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4d8160a1f8f5d522e27ef97da917f6d20c33c12387da254728d45871737dac56.exe
Resource
win10v2004-20240508-en
Target
4d8160a1f8f5d522e27ef97da917f6d20c33c12387da254728d45871737dac56
Size
5.0MB
MD5
5b9713f9063484cb70845d2e6e0e44fd
SHA1
45cf0dc478e5ac89f533cefb11ec5d557340e44c
SHA256
4d8160a1f8f5d522e27ef97da917f6d20c33c12387da254728d45871737dac56
SHA512
552ae3afb940fa8942bb76f3d8e1bbd10fa45875c54752875f66d849e19a405d260d50f1e9734ec78b0057971483ba89499397609ecb7cbaf0a99ee4501743f5
SSDEEP
98304:Nk4dvmLPjtoRud2rLHfKXv3XPmsg0Dd7h6+uQglybTED0cAz3VIZYJbnb:NbMb9d6HivHP70xQEybTG0cq3VIeJbb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d8160a1f8f5d522e27ef97da917f6d20c33c12387da254728d45871737dac56 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ