LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
abf9ddfa6c15ac2a406f3fda6af32621f20d1abd798f163f7431e43328cfd233.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
abf9ddfa6c15ac2a406f3fda6af32621f20d1abd798f163f7431e43328cfd233.exe
Resource
win10v2004-20240704-en
Target
abf9ddfa6c15ac2a406f3fda6af32621f20d1abd798f163f7431e43328cfd233
Size
2.1MB
MD5
2622c3764fa92ab802192f91e493f430
SHA1
e9c4aa17281b81b5725c487d5d97c67c034f5b73
SHA256
abf9ddfa6c15ac2a406f3fda6af32621f20d1abd798f163f7431e43328cfd233
SHA512
b7c3ee0ca92ff038b925eaa6ae47f5be8db6cbde791415433df324583aeb930ce82802890eeaac80b727d1b22af214349bfc531914e9f17cbca31bb3aa169c74
SSDEEP
49152:9WBj/c4qk+s70487SjN+pwdKq5BWt5GTdVXTt50k:yqC787SjN+ptqIczH0k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abf9ddfa6c15ac2a406f3fda6af32621f20d1abd798f163f7431e43328cfd233 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ