LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
7802c384e86c7bf70694720f1f81beab4b5158556fdfad748adbe9d126adf701.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7802c384e86c7bf70694720f1f81beab4b5158556fdfad748adbe9d126adf701.exe
Resource
win10v2004-20240426-en
Target
7802c384e86c7bf70694720f1f81beab4b5158556fdfad748adbe9d126adf701
Size
956KB
MD5
5e325f3a2172789b6ae5b2d2cbf11ca0
SHA1
6fa56eb360c0d9e7d8c660d1021c525f5724890f
SHA256
7802c384e86c7bf70694720f1f81beab4b5158556fdfad748adbe9d126adf701
SHA512
9dd896d8d0fb4063a0f7f362581b165ca950606f72bdb4ea8f669454a8897eed37919090f07145b44b5c13d2f7f8f70fa7e5b56f642f9c16ac841120ba29d02d
SSDEEP
12288:oNVSegthIqepdMviQzePlMTzrQMOHOXnjI0cEcWb5IUbqduTc7nEFNEP1cwKbIoz:uVP4iQzePuruuXj/cyf+gajP4/T9d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7802c384e86c7bf70694720f1f81beab4b5158556fdfad748adbe9d126adf701 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ