LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
3d351f42e86ce089d00fb908c8166bb3bec22e154482f418945d4760d639793a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3d351f42e86ce089d00fb908c8166bb3bec22e154482f418945d4760d639793a.exe
Resource
win10v2004-20240226-en
Target
3d351f42e86ce089d00fb908c8166bb3bec22e154482f418945d4760d639793a
Size
1.0MB
MD5
aa0e299be66af2f22a8f1004cc702e7b
SHA1
f40f98fa44b5dd24c579d8d24413c324c05000f1
SHA256
3d351f42e86ce089d00fb908c8166bb3bec22e154482f418945d4760d639793a
SHA512
76a44ab783671263c6904d78d835031bea35ea74ec40ed0bc53d6dccc3a41bf47054734a6c3d319bc53c189baddcd53c250ee2d89b1861356204a33d4e94d6d9
SSDEEP
24576:+VP4iQzePuruuXj/c/dIyYe12VIDtgrVDXLRya/ZwnOJUzZK:+WBj/cVIw2WDtWdXLsiZxK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d351f42e86ce089d00fb908c8166bb3bec22e154482f418945d4760d639793a |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ