LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
c3a82c9ff0d80d3c08202cf37899c1f54f3c1b5cdadbbd0c3f8bcc2c8019d138.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c3a82c9ff0d80d3c08202cf37899c1f54f3c1b5cdadbbd0c3f8bcc2c8019d138.exe
Resource
win10v2004-20240709-en
Target
c3a82c9ff0d80d3c08202cf37899c1f54f3c1b5cdadbbd0c3f8bcc2c8019d138
Size
1.8MB
MD5
7c9a2ab62c2d10dbfc502584bb09bd36
SHA1
ad6d001bf4f06a0682a30e03b7f526634c219e2c
SHA256
c3a82c9ff0d80d3c08202cf37899c1f54f3c1b5cdadbbd0c3f8bcc2c8019d138
SHA512
af1fb40f40e9d3c220f9efd3ea5404724d47515003c4ccf0595ea4f11d18fbe6df42c9200942a9e2ce4c3e3c7cfa6d164bebf19401919ceb029a3e9f6be5a104
SSDEEP
49152:5WBj/cM7DBOZ4ksUTmIGwP+mVhWXgqqUVOoXCndNjN:m9SC8GwP+m1VU36LjN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c3a82c9ff0d80d3c08202cf37899c1f54f3c1b5cdadbbd0c3f8bcc2c8019d138 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ