LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
5f51505242592d9d8c0d2419f96c3cdf56676f01f06333ea8bed54a4f9b2728b.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5f51505242592d9d8c0d2419f96c3cdf56676f01f06333ea8bed54a4f9b2728b.exe
Resource
win10v2004-20240426-en
Target
5f51505242592d9d8c0d2419f96c3cdf56676f01f06333ea8bed54a4f9b2728b
Size
1.3MB
MD5
381dcd0f69d0262cac902f14b2761e10
SHA1
30c05bdaef2b05a24b20aea8d24308ee8e0c323a
SHA256
5f51505242592d9d8c0d2419f96c3cdf56676f01f06333ea8bed54a4f9b2728b
SHA512
426156e60533b6af3104ff429179fbb6279729922dd9f3198d1220157b56ea2f6627d1dc3506fed5f9176c7186862c468745c9d56f8174570c6af991e3aeacba
SSDEEP
24576:DVP4iQzePuruuXj/cB0n1biEX1tBlThO3FWgYRFLsJfvpwObb5Tdg:DWBj/cBQiEllThO4gY/AJZBjg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f51505242592d9d8c0d2419f96c3cdf56676f01f06333ea8bed54a4f9b2728b |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ