A2W
GetLv
HOOK��������
HOOK���ֽڼ�
HOOKȡ����ID
HOOKʮ����ʮ
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
zhlogin
��ַ_ȡAPI��ַ
ȡ�ӳ���ͷ��
ʮ�����Ƶ��ֽڼ�
Behavioral task
behavioral1
Sample
691aa4c59402b8a00479c3e2cec54ac65f267d3b6bdeff2bb858ed8d02d67a99.dll
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
691aa4c59402b8a00479c3e2cec54ac65f267d3b6bdeff2bb858ed8d02d67a99.dll
Resource
win10v2004-20230703-en
Target
691aa4c59402b8a00479c3e2cec54ac65f267d3b6bdeff2bb858ed8d02d67a99
Size
949KB
MD5
1dec464e18c1817ce00340ef386b7de9
SHA1
bf2e3f05ca5ef65244e2cef81fad449019b0a7fd
SHA256
691aa4c59402b8a00479c3e2cec54ac65f267d3b6bdeff2bb858ed8d02d67a99
SHA512
969d7ffbb45a4e6b954bf02906cfa71f62309cf747a34462da75859115fb2eb6971f5e4b51316e59ae3c997fa5958dc848a109420a29a0d324cb158026b78953
SSDEEP
12288:ahPI/dIQE+KcZv5LWwIwWnbajPUqgvzOXmdhm5RXLSATvxradhN9aSkLDQ0PUK9:ahPIa0N/sEUqU3zmnXLSu5Kf9af/xUo
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
691aa4c59402b8a00479c3e2cec54ac65f267d3b6bdeff2bb858ed8d02d67a99 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
A2W
GetLv
HOOK��������
HOOK���ֽڼ�
HOOKȡ����ID
HOOKʮ����ʮ
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
zhlogin
��ַ_ȡAPI��ַ
ȡ�ӳ���ͷ��
ʮ�����Ƶ��ֽڼ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE