LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
f67031ce19c5f274c8f5f19af2b37053194c674be03c5248175e162d8d65fa96.exe
Resource
win7-20240903-en
Target
f67031ce19c5f274c8f5f19af2b37053194c674be03c5248175e162d8d65fa96
Size
5.4MB
MD5
cd46da7237f4aac98fcef8aa58cc364c
SHA1
d7d2f36a0f9ffdd60b46039e4588c5e886089ac3
SHA256
f67031ce19c5f274c8f5f19af2b37053194c674be03c5248175e162d8d65fa96
SHA512
7e51cfe238b9701d54bea6ee03178493342e0491c887fca815391b08b6256570030dd925f6d7446ce14ab67c97c17dd651a0e0917fb26e6aea01d3647c8fb4cc
SSDEEP
98304:wUZXtydiltD46ZgoLpcrxVQsc3zkgKKYTRATKK1ndWnvqjB654Sdkn//qHVJu:wytydi06Dpcrxqj3KFTRoKK1nDadAHqq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f67031ce19c5f274c8f5f19af2b37053194c674be03c5248175e162d8d65fa96 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ