LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
d6ee27761a5b5a3c9b9dd0072821e336e9bd7f2542db0178bc430149e1de3ff1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6ee27761a5b5a3c9b9dd0072821e336e9bd7f2542db0178bc430149e1de3ff1.exe
Resource
win10v2004-20240709-en
Target
d6ee27761a5b5a3c9b9dd0072821e336e9bd7f2542db0178bc430149e1de3ff1
Size
1.2MB
MD5
8bd20f76c245ce8bb071fdd06487fb72
SHA1
fffb1880aa8faf59caf8ec0ce6aad3913cde5c1e
SHA256
d6ee27761a5b5a3c9b9dd0072821e336e9bd7f2542db0178bc430149e1de3ff1
SHA512
1e5b1aa46dff8a4e34431e9cabc04e5c057e5c02de969f1efba02e6cc356d38080cfe7fc7f94a62cc1603910b272fcd8f00f4afb4152b0a51960cc371998c32a
SSDEEP
24576:giU7nuxInXjKzbHhzqfnVyuCy9mXv96LZHBMl7MoJfpur0u1XV1lV6Ss:bxzbHhzqMP96LS7Moxu1Xf6p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d6ee27761a5b5a3c9b9dd0072821e336e9bd7f2542db0178bc430149e1de3ff1 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ