?EngineProc@@YGJHIJ@Z
?process1@@YAHHHHPAD@Z
?process2@@YAHXZ
?process3@@YAHH@Z
?process5@@YAHH@Z
Behavioral task
behavioral1
Sample
b52ab60eba2ae8d82bf0973029b20e40N.exe
Resource
win7-20240705-en
Target
b52ab60eba2ae8d82bf0973029b20e40N.exe
Size
582KB
MD5
b52ab60eba2ae8d82bf0973029b20e40
SHA1
c1b09640a5711ab449d3dac9f7242368df903780
SHA256
4c74beb1d30d666333b6ecb2342a11056d28fff0ca1e2399a602181f4b7b9031
SHA512
1f38c65254fd6159fdd79873e413e2c1cefdc3606ca1c8c1c965918ac3f0da7acb97f9ba44e96d3f2a024887b76971f250d4daa156bf0b96551260d1fbbe60aa
SSDEEP
12288:vplrVbDdQaqdS/ofraFErH8uB2Wm0SXser5FU:BxRQ+Fucuvm0as
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b52ab60eba2ae8d82bf0973029b20e40N.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
?EngineProc@@YGJHIJ@Z
?process1@@YAHHHHPAD@Z
?process2@@YAHXZ
?process3@@YAHH@Z
?process5@@YAHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE