LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
c84ce1df7158f8a6d8ea05f8db5d326522060750379884c3d01ee5d830b346a1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c84ce1df7158f8a6d8ea05f8db5d326522060750379884c3d01ee5d830b346a1.exe
Resource
win10v2004-20240426-en
Target
c84ce1df7158f8a6d8ea05f8db5d326522060750379884c3d01ee5d830b346a1
Size
4.8MB
MD5
25ce8d1304446c1f4c9de93df5203691
SHA1
ca3927513819ba5e401c2154435efe23d111a503
SHA256
c84ce1df7158f8a6d8ea05f8db5d326522060750379884c3d01ee5d830b346a1
SHA512
7e551e67b6ccf5f3643ef22fa31bee0948a6d9d6274641811715781cbc2b6ec2689305fde0e77bb407d42e58808e1d1d3458bf2c84b47346c5e676e27fd9b51b
SSDEEP
98304:YP4txKFVJRlKBPE/JHlTaxa5iVFqZChp4TNPjbpc:YAtxKRKBMfaxaYfq64tni
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c84ce1df7158f8a6d8ea05f8db5d326522060750379884c3d01ee5d830b346a1 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ