ShowDllForm
ShowDllModalForm
Behavioral task
behavioral1
Sample
5928c47fba851d5f724543fb9c07c901d807c610f15a1bf9ed31e7bcf02aaff1.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
5928c47fba851d5f724543fb9c07c901d807c610f15a1bf9ed31e7bcf02aaff1.dll
Resource
win10v2004-20230621-en
Target
5928c47fba851d5f724543fb9c07c901d807c610f15a1bf9ed31e7bcf02aaff1
Size
758KB
MD5
0c717549e3d81c6df2a7c6bd7a2bcaa7
SHA1
1cce5680b14a958237a6cf12a9119841a912062e
SHA256
5928c47fba851d5f724543fb9c07c901d807c610f15a1bf9ed31e7bcf02aaff1
SHA512
36842ce46813821c31cd132f72777ac212eab905cf7117f214df2ec6b5e6b05faa76c04b57a2e9c1871237b2711fad6bf387bcb0351dc09764b115cc7faf6dbd
SSDEEP
12288:B1SRTImvTyKC5zrtyliAL+0vcWE3KnxPClqbmgZFK/lGRgOUqmq9kR6lhKX87Qxe:B1yTImbyZfQ360ve3qP5bDFK/cRgOnmE
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
5928c47fba851d5f724543fb9c07c901d807c610f15a1bf9ed31e7bcf02aaff1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ShowDllForm
ShowDllModalForm
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE