DllProcedureOverLoad
ExecuteCloseHintInfo
GetDLLDesc
IsPEMS5DLL
SetDllApplication
Behavioral task
behavioral1
Sample
ea529476c77fdf64f7044e1c771a5c91f36848db6a280e26890061df007bdba3.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ea529476c77fdf64f7044e1c771a5c91f36848db6a280e26890061df007bdba3.dll
Resource
win10v2004-20230220-en
Target
ea529476c77fdf64f7044e1c771a5c91f36848db6a280e26890061df007bdba3
Size
601KB
MD5
42b3a054be3de1ca318a4f3b88ede40b
SHA1
87eeb47a82bfc9415d7a829844c9eae29d81f1fa
SHA256
ea529476c77fdf64f7044e1c771a5c91f36848db6a280e26890061df007bdba3
SHA512
4faab0ecb3fe686685662b69c9ac8e513c0fb888027e05e8226d248a7b3a3a07eee34ed03a6ae0ffefa5fbeb59c4bacb8366ba28acad663a93383bd1113c9f52
SSDEEP
12288:zpPG8NZ+qSazNt16RKCpSUCAjswAH8Sg7oCvh2X4cTM6Q5k:zpPPftJB/opfCiAHc77c4cM6j
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
ea529476c77fdf64f7044e1c771a5c91f36848db6a280e26890061df007bdba3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllProcedureOverLoad
ExecuteCloseHintInfo
GetDLLDesc
IsPEMS5DLL
SetDllApplication
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE