LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0.exe
Resource
win10v2004-20240802-en
Target
5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0
Size
2.9MB
MD5
af20d4d3f30cd1ac68dc415e37519585
SHA1
933061ab91cfa2737ff72312070a61586b2fe4f8
SHA256
5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0
SHA512
28646dacc8e2c7054885df672819710a4a46b4334fc5ca6ba35feabbb1556bbf8f95851c832a32a9ef15c765e3e88da93df0c6a11c4d06463b7291388ea33437
SSDEEP
49152:mTznni+027LpW8dfdtKJanP0xIKYE00AaISNn1+/JT5xDAIoJ+LC2ujI:mnni+027l3fdtKJGPpKZ9AaI7D5ouCvj
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ