WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplaySASNotice
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxShutdown
WlxWkstaLockedSAS
Behavioral task
behavioral1
Sample
edfb20876984fc0fc4affe44cbc0a20507734035ac601060ce74087b53396246.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
edfb20876984fc0fc4affe44cbc0a20507734035ac601060ce74087b53396246.dll
Resource
win10v2004-20220812-en
Target
edfb20876984fc0fc4affe44cbc0a20507734035ac601060ce74087b53396246
Size
15KB
MD5
b1fb9ac7063db57192db9bee04c50363
SHA1
e0429e1b59989cbab6646ba905ac312710f5ed30
SHA256
edfb20876984fc0fc4affe44cbc0a20507734035ac601060ce74087b53396246
SHA512
a36631754f337b8e60277aaca37dde16688d341fe2e6f42b1b07ccfe5f6bf2bc01bbfd275e59579f90776b8b61e61533d3c3cd1fef4d64bbd367ca57fadaef9c
SSDEEP
384:UBw/v1/KX+fvw3zUmIWJAxwr6+S9Pfu7n5e:UwXcAwjUmH6x3deVe
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplaySASNotice
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxShutdown
WlxWkstaLockedSAS
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE