CreateDriverEvent
GetFileLog
Init
Restore
ex
Behavioral task
behavioral1
Sample
79f32d14cd52b07738e3077aa3681340_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
79f32d14cd52b07738e3077aa3681340_dll32_JC.dll
Resource
win10v2004-20230915-en
Target
79f32d14cd52b07738e3077aa3681340_dll32_JC.dll
Size
376KB
MD5
79f32d14cd52b07738e3077aa3681340
SHA1
ea16917ae22658108036f1ee2d1ef5253c109570
SHA256
8ac1282c5537beea83ca8b5f54f6104e4d5db8ecc5ac65b1907d5e87de8025e2
SHA512
e54900d6c1f9b25dcaf2be503435a07b9c66803a2442a340f20dda3034b8ee0843c677159796588f951574e96feda431353f9635562271af080624ab197a21c7
SSDEEP
768:exRi55S2J5bwROIOGnTED3Kvy8/pjjXIz8IPJ+IVNMz0Ik58R5n7n2Yh9J4JrWqs:exRwjVdI5wKpTk6IVKgTq/n7nBirWqM
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
79f32d14cd52b07738e3077aa3681340_dll32_JC.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDriverEvent
GetFileLog
Init
Restore
ex
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE