LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
ab3b49b5ad36c1b10685a78168fd4c8d08a0873f1dccb0ec2278934dbfb685af.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab3b49b5ad36c1b10685a78168fd4c8d08a0873f1dccb0ec2278934dbfb685af.exe
Resource
win10v2004-20240709-en
Target
ab3b49b5ad36c1b10685a78168fd4c8d08a0873f1dccb0ec2278934dbfb685af
Size
1.2MB
MD5
2e85dd709748e699eb1e670b99838d75
SHA1
8fa6268c55a39d1b037dc98857c2d3d399e228c3
SHA256
ab3b49b5ad36c1b10685a78168fd4c8d08a0873f1dccb0ec2278934dbfb685af
SHA512
886207fef5f76dfaa33983fb914dc773c0d6ef18e62f667db5b3b6af3f3fc06719de826e049beef080d0429debf5b6b5dd729fd9a62cf13a7cb20a31fe889e3a
SSDEEP
24576:NiU7nuxInXjKzbHhzqfnnzLif2zA0R1CO40yoMDfFEVOcDOlV6SH:YxzbHhzqrLe8U0bVOcS6W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab3b49b5ad36c1b10685a78168fd4c8d08a0873f1dccb0ec2278934dbfb685af |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ