LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
ac8bdc073f9b3f0ac30aaa7527b75171c600d1ccf1e8da9e1ab05f879503d576.exe
Resource
win7-20240508-en
Target
ac8bdc073f9b3f0ac30aaa7527b75171c600d1ccf1e8da9e1ab05f879503d576
Size
11.7MB
MD5
0682a05b056026c957fdcdb15e3b3485
SHA1
422091a97fdc01609ad2f8c62c2e5c03bfe2321f
SHA256
ac8bdc073f9b3f0ac30aaa7527b75171c600d1ccf1e8da9e1ab05f879503d576
SHA512
c03986fc3d592ba603141b0a2cd80ea9dd4cf1b461b930bfa5a6ccad334993e014dbf4231cbceba13c69df11f91bdad71df7748e370b906d26d4dc0acb36552e
SSDEEP
196608:Wrdl7qC/fCAmEAHgVXPhu7/GvD6erN0jQ061836sxMQ37oVH+Ce4pDhoGCk:Wrd0C/zFcgV5kG+CyQO366BcVeeJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac8bdc073f9b3f0ac30aaa7527b75171c600d1ccf1e8da9e1ab05f879503d576 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ