LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
b50b59a166d5715e309b940836b5e49e58dc7c34c66d9f1b3faacf829edaf0d5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b50b59a166d5715e309b940836b5e49e58dc7c34c66d9f1b3faacf829edaf0d5.exe
Resource
win10v2004-20240709-en
Target
b50b59a166d5715e309b940836b5e49e58dc7c34c66d9f1b3faacf829edaf0d5
Size
13.9MB
MD5
205b077f75c79794561eb1b09e71e9de
SHA1
f63574e346645a369a60afb32171deee18b66c94
SHA256
b50b59a166d5715e309b940836b5e49e58dc7c34c66d9f1b3faacf829edaf0d5
SHA512
e979df0c2b7deacdf46271b63969f92654a0d3618030e38da382943aa870cb185b5914fc70ee6cd92c3c45ba0ed2452cd088e68f57b2913d84f868bf670136f0
SSDEEP
393216:U+T2KETdDDvuRieSz+yuc9FgQ29AJ0ps2B4:UaOt41ej9yQ2AJv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b50b59a166d5715e309b940836b5e49e58dc7c34c66d9f1b3faacf829edaf0d5 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ