StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
04a005331e42a19d7c051aaeec596f3b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04a005331e42a19d7c051aaeec596f3b.dll
Resource
win10v2004-20231215-en
Target
04a005331e42a19d7c051aaeec596f3b
Size
627KB
MD5
04a005331e42a19d7c051aaeec596f3b
SHA1
0a2ece5cfd6c2aa6323e754541c3a32e73c23d69
SHA256
b7a7bb6d9290cbbbda59f0f6ef9a2f700f8d3465707ab6c9d6bf6669db5488ea
SHA512
960d86bcfbfab827afc1cdd4b592fdb426e720c37a09feb67fbb9cd0212b2a3f72f63c292006b0aeba738c37b4de098a3bd8ec2ffb14cdaf7374a9899d819910
SSDEEP
12288:2RE2jFJiDOIRkVV+9OhCGeBjPqRUlRpDBT0+On2xqX3Ca36G0ZS9keT4:2e+wiI+7OG6LqRUrpDBehXSNG0Zuk1
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
04a005331e42a19d7c051aaeec596f3b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE