CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
b209f7b48f506b4b8bc5b03c2c88978f4ecaaa9539d16d0803bed6b763abe6ef.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b209f7b48f506b4b8bc5b03c2c88978f4ecaaa9539d16d0803bed6b763abe6ef.dll
Resource
win10v2004-20220812-en
Target
b209f7b48f506b4b8bc5b03c2c88978f4ecaaa9539d16d0803bed6b763abe6ef
Size
841KB
MD5
7cb135d11270c63df5a94a2ee24d4622
SHA1
95ab3b834584352081e693dda9582df81a375261
SHA256
b209f7b48f506b4b8bc5b03c2c88978f4ecaaa9539d16d0803bed6b763abe6ef
SHA512
c4d687cbf65bbbfc57b6e97c529984fd3cdafec99ff6496530315e89e740d061ae352e270a5e725b2d76786ad6a9f85839c0f64b9a10500d3684ea108ec5f1ee
SSDEEP
24576:f2YUCXYow4BIcHmylyxiMvHW+IBB/kD1673:eYqUBI1EyxiMv2+iB/kD167
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE