LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
3963ae3d40645996897f4fccc66e62e17a52b58ecf2090f69bc3769d82a39f6b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3963ae3d40645996897f4fccc66e62e17a52b58ecf2090f69bc3769d82a39f6b.exe
Resource
win10v2004-20240426-en
Target
3963ae3d40645996897f4fccc66e62e17a52b58ecf2090f69bc3769d82a39f6b
Size
4.2MB
MD5
5475e1fcd6403cd1914186515d648394
SHA1
59555da1a0cbea576e96a1370e9af5a319a00485
SHA256
3963ae3d40645996897f4fccc66e62e17a52b58ecf2090f69bc3769d82a39f6b
SHA512
0b0f94c7a498779c9d7d953b47a53b1a3375c05ac8ffa67f2268f4b8be60d94721e074558635dedca2fef452c72cca59c36a521fd8c914efc18ec3b86d190ec1
SSDEEP
98304:3w+EGV4yhZWjhiuAW3OthV9zGdTVZ/Vexi0q6mc94LGpW4Gn:3BEGV43vTmV9zG7Cx1mcQGpWh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3963ae3d40645996897f4fccc66e62e17a52b58ecf2090f69bc3769d82a39f6b |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ