AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
Behavioral task
behavioral1
Sample
b9cfcc413355b16fccbed0285d7906883cd3eb26bef0219452cdd74abcbd4100.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9cfcc413355b16fccbed0285d7906883cd3eb26bef0219452cdd74abcbd4100.dll
Resource
win10v2004-20221111-en
Target
b9cfcc413355b16fccbed0285d7906883cd3eb26bef0219452cdd74abcbd4100
Size
348KB
MD5
26bb4ec3dc6b8710a5393a86099845cd
SHA1
8af6153ad702a9a434a29af69e903e00d8883ff2
SHA256
b9cfcc413355b16fccbed0285d7906883cd3eb26bef0219452cdd74abcbd4100
SHA512
fe29427089d4db2d1d99deaaf11c994049d7dbaa748384320241ccee76b8783fa6a6045f84831449d9e2cb158cb9ce00b4097f2fcf2d1d7b9905e675fc2a94a6
SSDEEP
6144:Wj0THjILgM2u+nmzK6QgSuHL5vj6pNzAxrcxnE1CQcYI8+yXObxKqG9Lex:BHjIEGpzK6FSkFvOAeF0CxYgdbUC
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE