�����ɼ�
��Ӧ�̲ɼ�
�Ա���������
Behavioral task
behavioral1
Sample
cffccaaa05525442fa0d66526c735fe057701dede992bed9f52d77181470fe29.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cffccaaa05525442fa0d66526c735fe057701dede992bed9f52d77181470fe29.dll
Resource
win10v2004-20230220-en
Target
cffccaaa05525442fa0d66526c735fe057701dede992bed9f52d77181470fe29
Size
463KB
MD5
4c6c883312cb19abf300a063a02bf837
SHA1
76a6a4c79c1726847d71b34e3efd95475c5141c8
SHA256
cffccaaa05525442fa0d66526c735fe057701dede992bed9f52d77181470fe29
SHA512
746e582a31b22106c7a98ce28e51134b2bcfec6e38eceaaba073c888f8076c2e0234ff5d3510fb15922476ba3bf17e2edd4bfc5c4b81f15a54cf32c5a7b4300b
SSDEEP
6144:MC3rWhUvQ7soYSp15G/inbk3tRsQRv/ByHtM1M18ajEHYZnLvOpUqMHIDxL5Z:MsW8oYi5GUboEQl5itAMmmEOna+ho19
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
cffccaaa05525442fa0d66526c735fe057701dede992bed9f52d77181470fe29 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
�����ɼ�
��Ӧ�̲ɼ�
�Ա���������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE