CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
479e58b6445e64108deed00cda48c205db192679feb0c2fa70f070d2f7e8cbec.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
479e58b6445e64108deed00cda48c205db192679feb0c2fa70f070d2f7e8cbec.dll
Resource
win10v2004-20230220-en
Target
479e58b6445e64108deed00cda48c205db192679feb0c2fa70f070d2f7e8cbec
Size
1.0MB
MD5
76a83f136437e8303dd7e3cffb133f15
SHA1
292cab5b6cb6bbd5bb9325d308eafb0800b3931f
SHA256
479e58b6445e64108deed00cda48c205db192679feb0c2fa70f070d2f7e8cbec
SHA512
493cb1d2f11205a6433b0c21195bc467b6719420c84d96f68ea93bfd85b1a7af3321be807ae1b1c920d84a62f3789e6334f446106e5fa54b766330f8c5d3b8ab
SSDEEP
12288:PBGIqbb+gOVzq281Q8NGmDaWnM1Wgcxv8s0yF0e7Cd7HDVP69JZyW4nb0uOuPtLt:sIq/+gFHlk/Whxh0he7CVB4gnWf
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE