HookOff
HookOn
Behavioral task
behavioral1
Sample
5d137cbfc61221e32c4bf040e7f9fee0174c5dce49edc8b604734c250a7a1ccf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d137cbfc61221e32c4bf040e7f9fee0174c5dce49edc8b604734c250a7a1ccf.dll
Resource
win10v2004-20220812-en
Target
5d137cbfc61221e32c4bf040e7f9fee0174c5dce49edc8b604734c250a7a1ccf
Size
552KB
MD5
40f66494af10239c58a1e42c57055899
SHA1
2f244c1ca97ea978631b6bfe4dbccb9430586f79
SHA256
5d137cbfc61221e32c4bf040e7f9fee0174c5dce49edc8b604734c250a7a1ccf
SHA512
6957d864e13e6160be160d70f9344dbb32206e6308c1dd6e0593b274d19f06b4fcd6e5342108e50d029cba5088bad50bc772def18b4c5c4693ec6a4df934ddb6
SSDEEP
12288:LtL7K+Vq847nUWUyW10DBg18IwmMvMFpKIeVbDs6RI43qBmyIXVa9RTFN:5qeAby14C1imM0bM1o6RI4PIJN
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE