LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
c916ea885b57b175a6a3c349f7f0b51e74927f816d0af064f517c04f2f7c4fa8.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c916ea885b57b175a6a3c349f7f0b51e74927f816d0af064f517c04f2f7c4fa8.exe
Resource
win10v2004-20240508-en
Target
c916ea885b57b175a6a3c349f7f0b51e74927f816d0af064f517c04f2f7c4fa8
Size
1.0MB
MD5
b2b6a6cca32df5a9835cc3a42ec3e62e
SHA1
87bb6439a7498ebefa329c8bdcb8390ebbb0ab2d
SHA256
c916ea885b57b175a6a3c349f7f0b51e74927f816d0af064f517c04f2f7c4fa8
SHA512
5f9f09876b24333ed48692191b5cf7f8feedb1d5337a9d523181d6003205f507b9569bec1b7c4142f1fa76341cb2020e79e4c64a7e24fd68a12f009b3e594131
SSDEEP
24576:oVP4iQzePuruuXj/c02Y88CzJxjF3Wdg1nevhjWwVmx2CAAXb:oWBj/c0h8HzblRevhj3m8Cjb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c916ea885b57b175a6a3c349f7f0b51e74927f816d0af064f517c04f2f7c4fa8 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ