Init
Proceed
Behavioral task
behavioral1
Sample
pobedit0922/doc/getkeys.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
pobedit0922/doc/getkeys.dll
Resource
win10v2004-20231222-en
Target
566ca1d2c1878cec7fe31dbf6dcc309e
Size
110KB
MD5
566ca1d2c1878cec7fe31dbf6dcc309e
SHA1
38e0004eeea69d1ca9941ba865bbd31370a916bb
SHA256
e530cf5cd45e666410ab2b901cdb9a01207067235d233b40b1002352e8bc7aaa
SHA512
9610adb10b85965fc258bbc4d4108bcfbc2eaa9b569d3eab3675bb60e968be4fbc06832686c96292104ab789f908a3ae02642c26d6c8cd1a40bfe12c364be8ed
SSDEEP
3072:4oLkyGvOeQ7sPoKSZpBQENT9FS3nO0o1xfSBmEv:HAOLL/Z1R903n8Cv
resource | yara_rule |
---|---|
static1/unpack001/pobedit0922/doc/getkeys.dll | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/pobedit0922/doc/getkeys.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Init
Proceed
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE