LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
3ae1d6a19194710859e3a57090c6cf4b81b1688c5a5a350aa467fe24a477f757.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3ae1d6a19194710859e3a57090c6cf4b81b1688c5a5a350aa467fe24a477f757.exe
Resource
win10v2004-20240704-en
Target
3ae1d6a19194710859e3a57090c6cf4b81b1688c5a5a350aa467fe24a477f757
Size
1.2MB
MD5
da44106c162bdbda3d01b2a080904768
SHA1
0fc51049a81fc08e8928512232c7528e539e0612
SHA256
3ae1d6a19194710859e3a57090c6cf4b81b1688c5a5a350aa467fe24a477f757
SHA512
8897cb9806d9d6573f5b82cf003aff4e94cfae02795a426cd54f3e63e93dd9437d1df144c0c44a8d7d54a8e5f10664e0d8425ddd32cc14ba8ff339f6ff54ebe7
SSDEEP
24576:7iU7nuxInXjKzbHhzqfnFmNyiSFzPNsfUMrOVmUM6m9ANMILXflV6SN:ixzbHhzquImfnrOTb2I36I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ae1d6a19194710859e3a57090c6cf4b81b1688c5a5a350aa467fe24a477f757 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ