LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Behavioral task
behavioral1
Sample
95db815dbd94d7a56d4a858beb74cadde6e96629dd03f6831dbb713e4421a53d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95db815dbd94d7a56d4a858beb74cadde6e96629dd03f6831dbb713e4421a53d.exe
Resource
win10v2004-20240802-en
Target
95db815dbd94d7a56d4a858beb74cadde6e96629dd03f6831dbb713e4421a53d
Size
1.3MB
MD5
39e5e1135c284369921eacf54ea8a2c4
SHA1
b116095b9cdc72f4f671c11cf96f8db05c0767f4
SHA256
95db815dbd94d7a56d4a858beb74cadde6e96629dd03f6831dbb713e4421a53d
SHA512
4e84a399967358c23707d94b3820b86153b81257ad8e028fb1dcbe5b9cdc0e3a8d62b51d937d9854045b50ea33dc008c9f13562c0c013880a170aac62adead43
SSDEEP
24576:uiU7nuxInXjKzbHhzqfnExp2YZyN6IG8YVN481meqGEQvZhWWa2F5RD:txzbHhzq8xE/Vq4xdGEeHlD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95db815dbd94d7a56d4a858beb74cadde6e96629dd03f6831dbb713e4421a53d |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ