CreateDLLForm
GETMachineIDM
GETUserIDM
GET_MachineIDM
SHowDLLForm
getcaption
getqx
read_regdate
read_regdate2
remote_reg
remote_reg2
sensLock_Recharge
sensLock_W_supkey
sensLock_check
sensLock_superkey
sensLock_user
Behavioral task
behavioral1
Sample
3b0e3c285673f1e28af37eb24bbb8fc64159a684ddb931132fb7ccd9f6857dcc.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3b0e3c285673f1e28af37eb24bbb8fc64159a684ddb931132fb7ccd9f6857dcc.dll
Resource
win10v2004-20230221-en
Target
3b0e3c285673f1e28af37eb24bbb8fc64159a684ddb931132fb7ccd9f6857dcc
Size
952KB
MD5
8a732a0ff80542045e3504a501ff816e
SHA1
1076601234dc31622af7ef7fe957508754b525a9
SHA256
3b0e3c285673f1e28af37eb24bbb8fc64159a684ddb931132fb7ccd9f6857dcc
SHA512
8a7aab8fccde89792e5896cc930d61957c525de4a1a2f90cc18ebb59eb933879daa7fddb146c705ef0dffce66723dd234f28b90d2310d73a004332209748f57a
SSDEEP
24576:64W35M4TRtWj22TO3wF/sRAoL/anfgfPXnQcnq7uhP/M+:6P5MYF2TWW/NcXnQcq7q3d
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
3b0e3c285673f1e28af37eb24bbb8fc64159a684ddb931132fb7ccd9f6857dcc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GETMachineIDM
GETUserIDM
GET_MachineIDM
SHowDLLForm
getcaption
getqx
read_regdate
read_regdate2
remote_reg
remote_reg2
sensLock_Recharge
sensLock_W_supkey
sensLock_check
sensLock_superkey
sensLock_user
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE