GetGameData
Init
Behavioral task
behavioral1
Sample
008f581a0768e6be9b82e90d1750d74db1cf6ac49bc635841af1eb605cd448d4.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
008f581a0768e6be9b82e90d1750d74db1cf6ac49bc635841af1eb605cd448d4.dll
Resource
win10v2004-20230220-en
Target
008f581a0768e6be9b82e90d1750d74db1cf6ac49bc635841af1eb605cd448d4
Size
1.9MB
MD5
cd90848d7a84e57948ef660a54c9d7aa
SHA1
6acab92162b8dd1363fd42ef07b555aa8f970a67
SHA256
008f581a0768e6be9b82e90d1750d74db1cf6ac49bc635841af1eb605cd448d4
SHA512
0fb5e65d681a4de09e4b60f107b1b80e38e5ec66009e6683cb4088b2d03248533b0b0a7f313600b500eba6299ef41abb67efbd18cd9ce2850fc1625229d0ff85
SSDEEP
49152:SN6QmKktYBURbFcJxigZbi7I5Cp9IaXTH7HyN2:iBQ2+gxe7I4H7HyM
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
008f581a0768e6be9b82e90d1750d74db1cf6ac49bc635841af1eb605cd448d4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetGameData
Init
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE