fadd
fchg
fget
gettperrno
gettpurcode
tpacall
tpalloc
tpcall
tpchkauth
tpchkunsol
tpfree
tpgetrply
tpinit
tpsetunsol
tpstrerror
tpterm
tuxgetenv
tuxputenv
Behavioral task
behavioral1
Sample
b8079ce400f8b7d3dba67e5cf14eed0142cf4c77668991128b80a0c2e71c7032.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
b8079ce400f8b7d3dba67e5cf14eed0142cf4c77668991128b80a0c2e71c7032.dll
Resource
win10v2004-20230621-en
Target
b8079ce400f8b7d3dba67e5cf14eed0142cf4c77668991128b80a0c2e71c7032
Size
179KB
MD5
6f42dec7c40e46b290a9d8bb9b6772e2
SHA1
6f591d013c57123180befe9f2022fc29df529328
SHA256
b8079ce400f8b7d3dba67e5cf14eed0142cf4c77668991128b80a0c2e71c7032
SHA512
588ba1f176a4facf8c413dfb2db8aabe53265b335cbee6927c2bfa8993c95ad3533e5bcc519aaf6029f659fd27a8a2782c126c551226c9cd2921d17b01ee17f8
SSDEEP
3072:f8V6e5rTzQJyFqkY49ZgiSDI3xh+qS2cXZhEF+M6SgYY4Pd:w5L0ij9ZZSDIBfS2IUFh6wH
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b8079ce400f8b7d3dba67e5cf14eed0142cf4c77668991128b80a0c2e71c7032 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
fadd
fchg
fget
gettperrno
gettpurcode
tpacall
tpalloc
tpcall
tpchkauth
tpchkunsol
tpfree
tpgetrply
tpinit
tpsetunsol
tpstrerror
tpterm
tuxgetenv
tuxputenv
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE