LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
134f63f49a4d0ffb66c910efc62fd71981f03bba99c88f97968236ed51dc4c27.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
134f63f49a4d0ffb66c910efc62fd71981f03bba99c88f97968236ed51dc4c27.exe
Resource
win10v2004-20240709-en
Target
134f63f49a4d0ffb66c910efc62fd71981f03bba99c88f97968236ed51dc4c27
Size
1.3MB
MD5
605c179ddffe0519e200a3e6b371b837
SHA1
ea7c8c811f16bed6a6fac97af14ad7c959cdb66c
SHA256
134f63f49a4d0ffb66c910efc62fd71981f03bba99c88f97968236ed51dc4c27
SHA512
80cca425b8e1f9c3c58a0b0f39c3693bc59d5db12ba980d6570cedf4962388009eded9a3bb1494435233daa984a2fb720f53827585fdb0930be51803dd449f1f
SSDEEP
24576:NVP4iQzePuruuXj/cdZh5sA9iF5laeWtRdCsoupA5M+fpVVzs:NWBj/cdD6AspaeWtRlAM+BVVo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
134f63f49a4d0ffb66c910efc62fd71981f03bba99c88f97968236ed51dc4c27 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ