StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0a126647902746eff53152f9afe5017e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a126647902746eff53152f9afe5017e.dll
Resource
win10v2004-20231215-en
Target
0a126647902746eff53152f9afe5017e
Size
684KB
MD5
0a126647902746eff53152f9afe5017e
SHA1
003089b51285feb35e018a3651942d54989537b8
SHA256
55eaad60435eda0f3980a9fe680eba03a4cf9b97d5c4e946a3b8b807ebfda9fd
SHA512
f130b09f181d35a7f53a72205148bbd28be83b661efc7203e07562175d66bd2a921097a1315a88656ec4329226a9898eeffc2a327371c89df9c848c4a95668fb
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGZ:+15U3jSfyOYA0cOIti+vITARw6Z
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0a126647902746eff53152f9afe5017e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE