StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0336fb33b70e7ce05c6ac5ad0fdb2e04.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0336fb33b70e7ce05c6ac5ad0fdb2e04.dll
Resource
win10v2004-20231215-en
Target
0336fb33b70e7ce05c6ac5ad0fdb2e04
Size
627KB
MD5
0336fb33b70e7ce05c6ac5ad0fdb2e04
SHA1
ab0dac02362b1caa850f1e84ebaf670096619fdd
SHA256
63c1f23369490528cda4bdbece98ac9735ab2cad69b4182f04f0a408f599342f
SHA512
29f8da081f8255ac930ace0a06a08b4aa8be595ace9a4585746ea973d9b4de2ef50a3207e0e8125101f4506d4650753cd9c286d918e581055d5374f4e039e124
SSDEEP
12288:2RE2jFJiDOIRkVV+9OhCGeBjPqRUlRpDBT0+On2xqX3Ca36G0ZS9keT8:2e+wiI+7OG6LqRUrpDBehXSNG0ZukF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0336fb33b70e7ce05c6ac5ad0fdb2e04 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE