InstallHook
UnHook
Behavioral task
behavioral1
Sample
485d5599715bd59e9a91ec0c5c2faa67.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
485d5599715bd59e9a91ec0c5c2faa67.dll
Resource
win10v2004-20231222-en
Target
485d5599715bd59e9a91ec0c5c2faa67
Size
58KB
MD5
485d5599715bd59e9a91ec0c5c2faa67
SHA1
148f43484ebebda0a3e2afe56ac7126808a33d51
SHA256
fa2f0b39c7669dcce4d3f8585d906048bdce8cd604f14852de4c6ee09fa9fd52
SHA512
ccd86bcd3431718a5497412f4fea508170c38ead536f940ccbd06e59ba5939bad5cd4f96c56ba989806d831904d153990de20ac2f7a5bab8d564e5cb50a00b23
SSDEEP
1536:tpg6jDR4WGqnLQjoz/NIS81diGK4RD8wPmA:s6HbGqnTFAdiGKs9l
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
485d5599715bd59e9a91ec0c5c2faa67 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
InstallHook
UnHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE