?ENccg1@@YAHKKDD@Z
?RueenFather@@YAHKKDD@Z
?dd@@YAHKKDD@Z
?haha@@YAHKKDD@Z
KillOld
SetHook
runform
testform
Behavioral task
behavioral1
Sample
f8f68adfc0128b2b60c0916a541985ad8abdcb400011e3731a7a7df71f470e79.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8f68adfc0128b2b60c0916a541985ad8abdcb400011e3731a7a7df71f470e79.dll
Resource
win10v2004-20220812-en
Target
f8f68adfc0128b2b60c0916a541985ad8abdcb400011e3731a7a7df71f470e79
Size
122KB
MD5
c7651c2d7e6201f4354f801942bde714
SHA1
89c6e9a6ed8460df1aa7f62dc55daf74272fed05
SHA256
f8f68adfc0128b2b60c0916a541985ad8abdcb400011e3731a7a7df71f470e79
SHA512
b510ceafd71d2bbe70c66b2473e586056137ce7e18faba40c28eb94e9028422d74579b290f5e644fc5c5f5ccc14159df42dc940e100a524bf3022170fd151111
SSDEEP
3072:QY8aMuDk4w7ILKNd06aO52sb8wpqLTZ+Xa+OyR:S0w7OAWjO53qkqOR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?ENccg1@@YAHKKDD@Z
?RueenFather@@YAHKKDD@Z
?dd@@YAHKKDD@Z
?haha@@YAHKKDD@Z
KillOld
SetHook
runform
testform
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE