GetRetVal
InstallHook
SetCallFuncAddr
SetThisPtrAddr
Behavioral task
behavioral1
Sample
f01e0fbd0ff37a3c7aa32a76941ffa3349b43d818e81a1a2f1186bdc72735908.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f01e0fbd0ff37a3c7aa32a76941ffa3349b43d818e81a1a2f1186bdc72735908.dll
Resource
win10v2004-20220901-en
Target
f01e0fbd0ff37a3c7aa32a76941ffa3349b43d818e81a1a2f1186bdc72735908
Size
145KB
MD5
ba0fa77d825bcf55b5d28bdbe897559d
SHA1
c6c482e25c535bf63b3278e57f12bf431ec2a1ce
SHA256
f01e0fbd0ff37a3c7aa32a76941ffa3349b43d818e81a1a2f1186bdc72735908
SHA512
250f84fa90c0d4b79a8c7bd3639451064e8cb8e82d0f52ca05b674c89562c3e7071cd55f8e55b4462797986a1a0233d881117cbd05f42618a9c285d9889450f7
SSDEEP
3072:6ZH7cx7+lAApeQN5/ioqPTYalF0agXgDKNj9C0c17WIxy:6Ng7tfQN5/inEaMadDKNa1aIY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetRetVal
InstallHook
SetCallFuncAddr
SetThisPtrAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE