?ShellProc@@YGJHIJ@Z
?UnHook@@YGHXZ
LoadDLLResource
Behavioral task
behavioral1
Sample
d5f95c0da2b561dcb2b1ef4ead6f8e50da0ee8d60bf372e3b80c5c303a9e3f46.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d5f95c0da2b561dcb2b1ef4ead6f8e50da0ee8d60bf372e3b80c5c303a9e3f46.dll
Resource
win10v2004-20220812-en
Target
d5f95c0da2b561dcb2b1ef4ead6f8e50da0ee8d60bf372e3b80c5c303a9e3f46
Size
361KB
MD5
3baef80f8cc069cf66c355c7ae8e0552
SHA1
b19c24a490895b79a7a33c43df0f107c411a7a15
SHA256
d5f95c0da2b561dcb2b1ef4ead6f8e50da0ee8d60bf372e3b80c5c303a9e3f46
SHA512
f720db98c30c5224d006555f2bb6eb81ee13ec4a6a13d69e66deccac002acc2377ed52416487827b1f437982bcd4713f1c02fb727a98fae0c3f454b1dea7041d
SSDEEP
6144:p2tsqO1Uzw4bATNhMF7NVwI//kkwCZzM1iQCUt6i0qE4cFvuIryWK0fkl:p2tl8IwmMvMFpKISyMEdUEi04cFmIrPA
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?ShellProc@@YGJHIJ@Z
?UnHook@@YGHXZ
LoadDLLResource
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE