LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
75af7ac1b271af376c81c79118d29478561b3d8946759620ac1df5acae4f99e2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75af7ac1b271af376c81c79118d29478561b3d8946759620ac1df5acae4f99e2.exe
Resource
win10v2004-20240802-en
Target
75af7ac1b271af376c81c79118d29478561b3d8946759620ac1df5acae4f99e2
Size
9.5MB
MD5
0a54a7aa72e2b95c191d967684a80656
SHA1
c4a5dc289551a1957325e68aeaf429ea4df53a75
SHA256
75af7ac1b271af376c81c79118d29478561b3d8946759620ac1df5acae4f99e2
SHA512
13a7d61edc3c22fb508237bec2f277d1c16ae4ae119bab5698527decae382e0176a3a17d26263372fa235f12a35f55f4913514bcc0620b571d03d5f66af9d58c
SSDEEP
196608:I8CpecWkPmzk25PorlkoTCQFAcPq6+ChIF9D6BIs0Z:07WkPSt3Q2cSO816is
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75af7ac1b271af376c81c79118d29478561b3d8946759620ac1df5acae4f99e2 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ