LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
779d1fae1316bee12a401c906b1d374a855a0f50e8d3f8a5f44391727905e444.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
779d1fae1316bee12a401c906b1d374a855a0f50e8d3f8a5f44391727905e444.exe
Resource
win10v2004-20240426-en
Target
779d1fae1316bee12a401c906b1d374a855a0f50e8d3f8a5f44391727905e444
Size
6.7MB
MD5
51e40d7ff9be9fece988a37ab684c155
SHA1
d02d8d7b79bb98d4dff5c6e5feb58955f637fda4
SHA256
779d1fae1316bee12a401c906b1d374a855a0f50e8d3f8a5f44391727905e444
SHA512
598676391cb0e55b74182d3a77332d0acc2201727a46e6182a0487bd4e0b9a6b67a184deb87c155d32c0d56e2671471f02104baa24f22bb5ad6d2b4c15f5aecb
SSDEEP
196608:463+qS8Hy2Zx/2YgHh4aBE1jVdGXctRdXW:4qkWFZ927NE1jLGiR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
779d1fae1316bee12a401c906b1d374a855a0f50e8d3f8a5f44391727905e444 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ