LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
8ef50580a252580b62d086136f7b6e48ba77142fe9e090f4efcf76f7720b80a1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ef50580a252580b62d086136f7b6e48ba77142fe9e090f4efcf76f7720b80a1.exe
Resource
win10v2004-20240802-en
Target
8ef50580a252580b62d086136f7b6e48ba77142fe9e090f4efcf76f7720b80a1
Size
11.4MB
MD5
54df6b9e7c5f3593f229b970172bdc9d
SHA1
f5f46b4099e2ba513fe1588e7a0585d5183e42c0
SHA256
8ef50580a252580b62d086136f7b6e48ba77142fe9e090f4efcf76f7720b80a1
SHA512
89032cfe493e809c1aa4fb10a5414237b078ba8db46058f329df2fe9fd93f62126f3eff2204dab4586b9fbd1d66a302a18b0eaac20498bc1e26f088fec18bd4d
SSDEEP
196608:p/SClmLEJKQlv+hpGDCBj5xIfjngNKjSBzOQ/KR/f/B1cA9fMztjCnOwrDtGDXxS:paYmLsv+we5xILgNKjSBKQSd/r9G+nb2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ef50580a252580b62d086136f7b6e48ba77142fe9e090f4efcf76f7720b80a1 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ