CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
8f3f05b737a1bd0bd74936d092bfd260b73a09b4827311400346a805b5f3c23a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f3f05b737a1bd0bd74936d092bfd260b73a09b4827311400346a805b5f3c23a.dll
Resource
win10v2004-20220812-en
Target
8f3f05b737a1bd0bd74936d092bfd260b73a09b4827311400346a805b5f3c23a
Size
940KB
MD5
a080c49a963bbff47fc3a4e849d5b5f2
SHA1
48f1b2ce9bd64ef2eed8b28403c177d83122f8c2
SHA256
8f3f05b737a1bd0bd74936d092bfd260b73a09b4827311400346a805b5f3c23a
SHA512
c5eaac438eb6cd60829767eb176bfa65dfbad17f7ddabd6680812605d5938b929f06aff85f7e267ced3feb689bcf8c217236c84af40c0027b9eb9fcb96664c04
SSDEEP
24576:yWI0HB/PpLrywBd+2Xt90JDPS0i/N1rcM7GKQ:yD0HZ5ywu2d90JDPaFV77GKQ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE