LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
d31703e1c560f6dc2f456daef4fe15f021d47b528bfb1ed83e3e803e7c774829.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d31703e1c560f6dc2f456daef4fe15f021d47b528bfb1ed83e3e803e7c774829.exe
Resource
win10v2004-20240508-en
Target
d31703e1c560f6dc2f456daef4fe15f021d47b528bfb1ed83e3e803e7c774829
Size
10.0MB
MD5
274a5ab79bca3f291e0d94bdaf900399
SHA1
b315df17fe46b5618e1d6552efcfa1e665307703
SHA256
d31703e1c560f6dc2f456daef4fe15f021d47b528bfb1ed83e3e803e7c774829
SHA512
edf9b86a71dbced27589ec3ac4e0b08deda4d838dd64e272c333e354ea397fe3a7fe2ab633bcc3937afd11a437babf91ed012f6c156551e4bd7114fa198451e9
SSDEEP
196608:H6LBzZOTXV4Xs07BkDkRXQ8BgOxm+7UVYgt0W9kdrGGlQxqA7ZDB:H6LdZXsqkYe8BgSB7UVY2B9kdrGGlVqv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d31703e1c560f6dc2f456daef4fe15f021d47b528bfb1ed83e3e803e7c774829 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ