LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4.exe
Resource
win10v2004-20250314-en
Target
21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4
Size
12.9MB
MD5
8a4674735cb781536188f313e1ab2fd5
SHA1
2327a59ab3ade1e4c5ac3545dde07dfed6306c6c
SHA256
21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4
SHA512
bdc1948eaa0f741bcbba4ce3a1c6d9131bdd907a1778cbe2cb98ce3d17c10931eb860f8972eaa1636ce7ea90d4bcb92f826600c769df2f2b3b2069b75fea69b3
SSDEEP
393216:e/+8+tPmRyDC7YThjbw7xcr95+8VqYTB6fW2Gmv:e/WtPmR8TpCxO95+8V5v2xv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ