LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
9ec042599d25aa4cadd0cc5db757c86bdb4eb0464a8bd6d3c08b8e93351825c5.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9ec042599d25aa4cadd0cc5db757c86bdb4eb0464a8bd6d3c08b8e93351825c5.exe
Resource
win10v2004-20240802-en
Target
9ec042599d25aa4cadd0cc5db757c86bdb4eb0464a8bd6d3c08b8e93351825c5
Size
11.1MB
MD5
c0ff9722e61dfabcd8b74667f5a69930
SHA1
6e0302329887aa3185a641bf8e2571cd4e144589
SHA256
9ec042599d25aa4cadd0cc5db757c86bdb4eb0464a8bd6d3c08b8e93351825c5
SHA512
cdc55287dbcbd6c2c44eeab1d7ffc87fc46aca4af8a8851231a12618b29d68c2930762dd847346f3059a769b64bc1e908a8dd941e4326973709bfc8cab05aa7e
SSDEEP
196608:n8aMhYbQi6LgbxZv6J+oGApSpwl5v/2yFJfBY4WeHj04QXLhp:9sYfVPi+uSpUv/lPBY4WeHj04Q7j
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9ec042599d25aa4cadd0cc5db757c86bdb4eb0464a8bd6d3c08b8e93351825c5 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ