LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
4eff3bf2a6b47bfe6819d129664ce887b59897589870db94c3058a6f200535af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4eff3bf2a6b47bfe6819d129664ce887b59897589870db94c3058a6f200535af.exe
Resource
win10v2004-20240426-en
Target
4eff3bf2a6b47bfe6819d129664ce887b59897589870db94c3058a6f200535af
Size
2.7MB
MD5
7a09c18527253aef3889cd14d036f4dc
SHA1
e751c0c5bded024beed87e9ecca48b993aa86132
SHA256
4eff3bf2a6b47bfe6819d129664ce887b59897589870db94c3058a6f200535af
SHA512
18c60ceb54997b39a57e64de2d4f8d665307a4656f5b197cb996fa9bcd0ad74d4731090ff9d567f09818e706c8bec2abc242c3a49a908642e9fde1a586862f3c
SSDEEP
49152:CWBj/cjFA0c4mB5jR8MXfS1gjxk6MGQI3fScAi4G0P8teFMFccZ:McSMeg2/S14x/FMOI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4eff3bf2a6b47bfe6819d129664ce887b59897589870db94c3058a6f200535af |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ