EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
Behavioral task
behavioral1
Sample
191c62fb0ba93081003a350cd14a7f1d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
191c62fb0ba93081003a350cd14a7f1d.dll
Resource
win10v2004-20231215-en
Target
191c62fb0ba93081003a350cd14a7f1d
Size
634KB
MD5
191c62fb0ba93081003a350cd14a7f1d
SHA1
fb1fc2c222c353dc25e14b4598befb102e7960bc
SHA256
f8db9873f3232f6691c826665686287dffbadd2cd037d1c75749f7a1b3a43b08
SHA512
78b5a29996fce0c91633907dc8ecc711e813feaf2ac16c48a30ddc19cafa02561e6613ab51a8e47b7618e4e4f25d4839096c2fd1c59c590901c1c99c492963fa
SSDEEP
3072:vIl4V/rUaFPmgRMNlPTGQQm6ytwZEsrYkK4xLz:Al4V/r98gWNlPTGQQm6agrd9
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
191c62fb0ba93081003a350cd14a7f1d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE