StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
06b895b9124d0e5f3d2b41bd6a72cc51.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06b895b9124d0e5f3d2b41bd6a72cc51.dll
Resource
win10v2004-20231222-en
Target
06b895b9124d0e5f3d2b41bd6a72cc51
Size
627KB
MD5
06b895b9124d0e5f3d2b41bd6a72cc51
SHA1
a33d95c4e4f5c4e1884befb9e4bccd6a33a64598
SHA256
6b2067b87d32493084912d55af0b6c69593428e7525a2803087c0c8bfd3ccc28
SHA512
622402f7d65c714b9ee5cd956b597012df5b42538bf5b21e0ffbdbefd284a23f273db3b400826ea94d51fd344ded92f0a5e3f41a33b869579e8f67f9e356eff9
SSDEEP
12288:2RE2jFJiDOIRkVV+9OhCGeBjPqRUlRpDBT0+On2xqX3Ca36G0ZS9keTV:2e+wiI+7OG6LqRUrpDBehXSNG0Zuk4
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
06b895b9124d0e5f3d2b41bd6a72cc51 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE