??4CCreateCustomTiff@@QAEAAV0@ABV0@@Z
?IsArchiveException@CXCuverSolution@@QAEHXZ
DM_CreateInterface
DM_FreeInterface
Behavioral task
behavioral1
Sample
3363d06c18f8442514b37bdb271a328f48893817c1e2b7df1fbbe865a9c7e3df.exe
Resource
win7-20240705-en
Target
3363d06c18f8442514b37bdb271a328f48893817c1e2b7df1fbbe865a9c7e3df
Size
455KB
MD5
c8c7845bef3b2f57a38158914892dd9d
SHA1
68aae69b4df22b4acbb0a894f0d1eb8cd7434e9f
SHA256
3363d06c18f8442514b37bdb271a328f48893817c1e2b7df1fbbe865a9c7e3df
SHA512
aa185a4bf060780d16720ca7c6769845ff06bdf4f987f110b1c11324de5b6003852030b6b6b8e1558ee97572f307ee1bf7e684a5e271a306d4d1e042b3309b1f
SSDEEP
12288:yzHSeNhVoms4d6ttAsImBrxX6g40BYiu8cw1hX0V4jeiADOE3m:y3jVoUdSeBmFxXOiNcYhI4CpDV2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3363d06c18f8442514b37bdb271a328f48893817c1e2b7df1fbbe865a9c7e3df |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
??4CCreateCustomTiff@@QAEAAV0@ABV0@@Z
?IsArchiveException@CXCuverSolution@@QAEHXZ
DM_CreateInterface
DM_FreeInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ