?EngineProc@@YGJHIJ@Z
?process1@@YAHHHHPAD@Z
?process2@@YAHXZ
?process3@@YAHH@Z
?process5@@YAHH@Z
Behavioral task
behavioral1
Sample
74ecb87c8a638869fead98dfd6da2a80N.exe
Resource
win7-20240708-en
Target
74ecb87c8a638869fead98dfd6da2a80N.exe
Size
582KB
MD5
74ecb87c8a638869fead98dfd6da2a80
SHA1
b4dc7476f0366124d13161e254511acd4da34d5c
SHA256
cebf3455204f3b347d2e4a2ad3703efa31c439ab27326e940cb1a8e98034b2a2
SHA512
85d5181a48f5fa7d46ac47ae3ec86be9b3427f89eb23e7e14298dea4c0493acb7e527577ed529872879275fbc37c2acb60750d066cd1b975feeed4db96d88195
SSDEEP
12288:eplrVbDdQaqdS/ofraFErH8uB2Wm0SXser5FU:KxRQ+Fucuvm0as
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74ecb87c8a638869fead98dfd6da2a80N.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
?EngineProc@@YGJHIJ@Z
?process1@@YAHHHHPAD@Z
?process2@@YAHXZ
?process3@@YAHH@Z
?process5@@YAHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE