LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
cba91cac646c8fe660bdc05e00c86f8bba81b3537d066a9486606ae0c10ec43d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cba91cac646c8fe660bdc05e00c86f8bba81b3537d066a9486606ae0c10ec43d.exe
Resource
win10v2004-20240508-en
Target
cba91cac646c8fe660bdc05e00c86f8bba81b3537d066a9486606ae0c10ec43d
Size
1.7MB
MD5
8dd3fd4a27b472774a09212729a12ddf
SHA1
a70db8fd662af0d0a782e3e51347a1bffd575f9a
SHA256
cba91cac646c8fe660bdc05e00c86f8bba81b3537d066a9486606ae0c10ec43d
SHA512
3dbaaa2eafe05e13fc52f7edfb2b2f6dc6b48a96fbc2ec3f11f9456b8ab4f6052df87b7efd14e76416fa66a4109a88f1fedc63e4347e8f4b0d95a498e3f3bdfa
SSDEEP
49152:PxzbHhzqnnzebckZRAvou/qY+SU4h5ozoL:5z9zYnzebPZRB8bt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cba91cac646c8fe660bdc05e00c86f8bba81b3537d066a9486606ae0c10ec43d |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ