CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
0438979ef4139a9638b1f9767c5ab3a0c0cce9441bd19718aab382b129820833.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0438979ef4139a9638b1f9767c5ab3a0c0cce9441bd19718aab382b129820833.dll
Resource
win10v2004-20220812-en
Target
0438979ef4139a9638b1f9767c5ab3a0c0cce9441bd19718aab382b129820833
Size
1.3MB
MD5
3e8a6b8ca874bc0d11aaa62b18b6328b
SHA1
8087c41e55a2cee45b45401fe8276dd3bb81e6f3
SHA256
0438979ef4139a9638b1f9767c5ab3a0c0cce9441bd19718aab382b129820833
SHA512
d160d85c913b7939f388ab571fa94c49e413d4d5b2b7957bfdd9281fee3a3d9247a773664047c759f10465d6519611493de3f9d922e5c6729032e1f68d4bea15
SSDEEP
24576:S32PqlUHylZkAk5zSDWkN/N/y0s+hK++lx+CSqyioQUpp5K2KRnmkUt/:lmMsWAN/y0N8vlxvmp5XKRmft/
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE