CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
7b083daedd4b4dcb586a86809fd354768e04febf0be1f86ffd9af29f621919f4.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7b083daedd4b4dcb586a86809fd354768e04febf0be1f86ffd9af29f621919f4.dll
Resource
win10v2004-20230220-en
Target
7b083daedd4b4dcb586a86809fd354768e04febf0be1f86ffd9af29f621919f4
Size
1.3MB
MD5
f698637a8bf54e69b015eda68de61168
SHA1
c3fec7b18c6f141df293fb1b382a040276049ac1
SHA256
7b083daedd4b4dcb586a86809fd354768e04febf0be1f86ffd9af29f621919f4
SHA512
ced517429ef6e09c1734ed095f471492e8a13e1f350789e6bf6d539dd5ff14a2dc5ea7d1662655d4ec26f213eef6d2bfd58cbee8d3d29a9b77ba39b3268c7422
SSDEEP
24576:hYCQbPEmb9boaiqZ7rnZ58ujzaplr6KzA2KRnI6y:hYnbPNb9k+7bZ5Re8w1KR7
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
7b083daedd4b4dcb586a86809fd354768e04febf0be1f86ffd9af29f621919f4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE