CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
Behavioral task
behavioral1
Sample
1e98f384ea864cfa1d8c8383bfe491744e7af9a4bbe4668fb41f28b35444e305.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1e98f384ea864cfa1d8c8383bfe491744e7af9a4bbe4668fb41f28b35444e305.dll
Resource
win10v2004-20230621-en
Target
1e98f384ea864cfa1d8c8383bfe491744e7af9a4bbe4668fb41f28b35444e305
Size
996KB
MD5
b82699fbe588c980a3ccbb875dba3aa9
SHA1
f3d2401b095db1795e103d788485242c4be9c720
SHA256
1e98f384ea864cfa1d8c8383bfe491744e7af9a4bbe4668fb41f28b35444e305
SHA512
cbe397213404fa1ea8c2213d71318030b9526f9f22d53d9199f28fd3e0b28127021e2be5641a7b1adaa4f3c0cf89698a90914957773f74cded94725703e46b23
SSDEEP
24576:3ep74jO/2Fhw1GAFdG1hKcDjCezJW0efwE:3ep746awtFd+Xe0WzY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
1e98f384ea864cfa1d8c8383bfe491744e7af9a4bbe4668fb41f28b35444e305 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CreateDLLForm
GetForm
SHowDLLForm
getcaption
getqx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE