_tSafeThreadWrapper1@16
_tSafeThreadWrapper2@16
Behavioral task
behavioral1
Sample
b8e740ad0edf67010b0feb7af9a1edb627f13a2c65c363372f9e311d75517a10.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8e740ad0edf67010b0feb7af9a1edb627f13a2c65c363372f9e311d75517a10.exe
Resource
win10v2004-20240508-en
Target
b8e740ad0edf67010b0feb7af9a1edb627f13a2c65c363372f9e311d75517a10
Size
2.9MB
MD5
3a3d843578f07ed3a4025fd9567787c0
SHA1
946cfc34eb2ec18ff9ed662b47bbfabc9503e1bb
SHA256
b8e740ad0edf67010b0feb7af9a1edb627f13a2c65c363372f9e311d75517a10
SHA512
72e01247ebdcf5215224c261092c81f573f88678a6fd789670c10baac83199f559faec36b5265d6920f6012cf9091dd79a4780f44c1e0a9272103fbe30a84594
SSDEEP
49152:cvNQgX3UDi2Y0qVcRoxWRGolGJlRIRTC+gWReg50rs89HML:+0+T0q6RoxWrAJfIR2+gWIg5Ks8V0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8e740ad0edf67010b0feb7af9a1edb627f13a2c65c363372f9e311d75517a10 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
_tSafeThreadWrapper1@16
_tSafeThreadWrapper2@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ