AddRestoreHPItem
AddRestoreMPItem
EndHook
GetRunFlag
GetSkillNameInfo
HookProc
InstallHook
SetRestoreValue
SetRunFlag
UpdateRoleSetInfo
Behavioral task
behavioral1
Sample
cfdf0145ad880c75ab0c9b92fa843730566c04eaed2986d0934dab416aac5134.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cfdf0145ad880c75ab0c9b92fa843730566c04eaed2986d0934dab416aac5134.dll
Resource
win10v2004-20220812-en
Target
cfdf0145ad880c75ab0c9b92fa843730566c04eaed2986d0934dab416aac5134
Size
469KB
MD5
90e2ed5bcab91f15dae23a3b6393c731
SHA1
b443bb409cde1a1028a8cecc64659c16b88b3576
SHA256
cfdf0145ad880c75ab0c9b92fa843730566c04eaed2986d0934dab416aac5134
SHA512
238a4bf7b050e848bb65d5b6c44127ff70241d930c61535fd6d45908ca5b3a328ad8c623841475e13f09b5033cc593388e840428dd917949c0deac26841abb34
SSDEEP
12288:Np6oDGuqrbqTqqfILK5L7ig7OFMvwmb1TL5GTQTMHy:WoD4r2TiW7iUOFWwmb1/Oy
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AddRestoreHPItem
AddRestoreMPItem
EndHook
GetRunFlag
GetSkillNameInfo
HookProc
InstallHook
SetRestoreValue
SetRunFlag
UpdateRoleSetInfo
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE