CheckKeyByEncstring
CheckKeyByEncstring_New
CheckKeyByFindort_2
CheckKeyByReadEprom
GetID
NT_GetIDVersion
NT_GetVersionEx
ReSet
SetCal_2
SetCal_New
SetID
lizheng
sRead
sWrite
sWriteEx
sWrite_2
sWrite_2Ex
Behavioral task
behavioral1
Sample
8da7fa6ac5a2fdb7441576384d6caf6c9bfce5537bdc6296cd85e4e039110ee5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8da7fa6ac5a2fdb7441576384d6caf6c9bfce5537bdc6296cd85e4e039110ee5.dll
Resource
win10v2004-20220901-en
Target
8da7fa6ac5a2fdb7441576384d6caf6c9bfce5537bdc6296cd85e4e039110ee5
Size
401KB
MD5
9d6c2c5b16016b5557bfb32805ea6eb6
SHA1
42a7e601684f6dcf514d8b83ad5b9ae419476d4e
SHA256
8da7fa6ac5a2fdb7441576384d6caf6c9bfce5537bdc6296cd85e4e039110ee5
SHA512
6395ff4aafe2de1d75a097d7c74468a8a2d78bcf569bb5307caf1dd8dad19cf1a32eca4eac04d1bf78d1d656f30f8f37002a1f0f133d815be58f26062de94707
SSDEEP
6144:4xLJW1zs3VMsJvRm8LalOJJcl7HwkIAJvrxcMEe4hGeFl3belPwUpsnDB7w2I:ylvlMswUkd8te+1lLisDB7w2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CheckKeyByEncstring
CheckKeyByEncstring_New
CheckKeyByFindort_2
CheckKeyByReadEprom
GetID
NT_GetIDVersion
NT_GetVersionEx
ReSet
SetCal_2
SetCal_New
SetID
lizheng
sRead
sWrite
sWriteEx
sWrite_2
sWrite_2Ex
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE