StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
045b644ed379da30306db42d4beea4ce.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
045b644ed379da30306db42d4beea4ce.dll
Resource
win10v2004-20231215-en
Target
045b644ed379da30306db42d4beea4ce
Size
627KB
MD5
045b644ed379da30306db42d4beea4ce
SHA1
faa4ddb7a31d8017ba2372cc57560650b6555b7d
SHA256
178ae044887ab103f6e8a78ae6da42f1f81034103e6e7ca9a83fde7fd0acafcb
SHA512
b2e2e9340aeb7c6630cdd75ca3c21c3f1c36e18839498a3de042577e2f6ebf55e88349025916a0cbdb43f897faba45f6574d1ab8aba64668f97f96747e7df74c
SSDEEP
12288:2RE2jFJiDOIRkVV+9OhCGeBjPqRUlRpDBT0+On2xqX3Ca36G0ZS9keTt:2e+wiI+7OG6LqRUrpDBehXSNG0Zukg
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
045b644ed379da30306db42d4beea4ce |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE