LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
0792f3ace4712af9047ac5310ff45dd61da83d41b9f75e60a099568aab0bc43a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0792f3ace4712af9047ac5310ff45dd61da83d41b9f75e60a099568aab0bc43a.exe
Resource
win10v2004-20240802-en
Target
0792f3ace4712af9047ac5310ff45dd61da83d41b9f75e60a099568aab0bc43a
Size
6.8MB
MD5
e60f2cfa195d7fa2c8fd58e8c0766ceb
SHA1
88c0be4c4289fbca8d7627209e8efc368a5521f5
SHA256
0792f3ace4712af9047ac5310ff45dd61da83d41b9f75e60a099568aab0bc43a
SHA512
85155700124f35d0a53a383383588d4ac20c512a9caa3895962feb460464d728c408f2931d880dbf84dbfd8b9caf11cf0678163d7fb225dded11e325e717c81e
SSDEEP
196608:/GL5LftH/WBqHVTq8ekeuBODngMCx5Tohf5:eLVtHomDsG8nyTif
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0792f3ace4712af9047ac5310ff45dd61da83d41b9f75e60a099568aab0bc43a |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ