LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
261ccf6127419071501f01090e7443779ae9a84e47abc03c38cd652c24d2a51f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
261ccf6127419071501f01090e7443779ae9a84e47abc03c38cd652c24d2a51f.exe
Resource
win10v2004-20240802-en
Target
261ccf6127419071501f01090e7443779ae9a84e47abc03c38cd652c24d2a51f
Size
2.9MB
MD5
9db52b386b9f24c7568b215b9b55c71e
SHA1
bf9f202831a0a6feb10f03c69ae5f9aee8d4f4fc
SHA256
261ccf6127419071501f01090e7443779ae9a84e47abc03c38cd652c24d2a51f
SHA512
1c48a414bccbe6d101d61e5ffec30740d35737981e171ba313e8b2e0b145a20e7fafe4b3db07f35e5bcc75a975b49cb32822219bfc6586a62e0d9b6b80225292
SSDEEP
49152:RTznnirmSfkIopz4aJanP0xIKYE00AaISNn1+/JT5xk+xFwUa8Fn6q1lCr1:RnnirHspz4aJGPpKZ9AaI7vFwZBq1w1
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
261ccf6127419071501f01090e7443779ae9a84e47abc03c38cd652c24d2a51f |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ