StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
04dbdcb8f9634289f70e49718a508090.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04dbdcb8f9634289f70e49718a508090.dll
Resource
win10v2004-20231222-en
Target
04dbdcb8f9634289f70e49718a508090
Size
611KB
MD5
04dbdcb8f9634289f70e49718a508090
SHA1
78964fb92ba234601094dd142c6fe635c4c6fe7e
SHA256
1acebda3702a0675ffbbc16bff0b99bd7d4402d690919e26ee24d18e60c4602f
SHA512
a00e05f6dfd29828c52a189ce777c904e3cd6e93c0e7ce814f5bfd2af7c4d8302006734b708f252965cd7645094093383565ae408b0d449ddfcfc5c4e55af2e0
SSDEEP
12288:o5yMrLVmeIqzPHJmJTGpEgdnxv3u3vIycvKEEBo4njUc+Yy:9IrXIti+vIFknjU1
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
04dbdcb8f9634289f70e49718a508090 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE