LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
25169ab5a5b4a97461607228d326dbdc28da49f0230c82718188931b8b4f5dbf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25169ab5a5b4a97461607228d326dbdc28da49f0230c82718188931b8b4f5dbf.exe
Resource
win10v2004-20240709-en
Target
25169ab5a5b4a97461607228d326dbdc28da49f0230c82718188931b8b4f5dbf
Size
1.2MB
MD5
65367f02a6dcaf8e68b0a0c3c9f557dc
SHA1
82ef572a1e06bd4b22384fb40af698b41e5a3b48
SHA256
25169ab5a5b4a97461607228d326dbdc28da49f0230c82718188931b8b4f5dbf
SHA512
7609b5b4183e3a57f93f489befe69f1eb0a9081799388ef698e1933657cdd966a46ad3d2bdfacacb63220d97e999074ff28c1bbb8b93b8612bd47b2e35fcfc11
SSDEEP
24576:9iU7nuxInXjKzbHhzqfnPzeD0kom7P5sck+j4bOQ4ued1FUOEcFlV6S+J:IxzbHhzqzeDJB7vze4uIUO/67
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25169ab5a5b4a97461607228d326dbdc28da49f0230c82718188931b8b4f5dbf |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ