DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
48305a5dafad78dfb61e683d365a7ddee35232c3fb83dc696836fd5cafea8a2cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
48305a5dafad78dfb61e683d365a7ddee35232c3fb83dc696836fd5cafea8a2cN.dll
Resource
win10v2004-20240802-en
Target
48305a5dafad78dfb61e683d365a7ddee35232c3fb83dc696836fd5cafea8a2cN
Size
380KB
MD5
10a72452820fcb523f386d721c95b470
SHA1
22a34bde372f390a1537e7a3590f9600f833608a
SHA256
48305a5dafad78dfb61e683d365a7ddee35232c3fb83dc696836fd5cafea8a2c
SHA512
e1b328e32567615a6ad9e74f7af5350f3d4579d68a5268f2dcb0c66ee7c4d8e61b8cc64263363c9073baf2ab53487740593107b89b6733911a722d3cfe90ac15
SSDEEP
6144:c5/BXF2idZecnl20lHRxp3gBghVFph/qdzDi+qsnbEud03XanV0IYjQxvMy2ex:cPVF3Z4mxxughVFpkZbEuMifFxky2ex
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
48305a5dafad78dfb61e683d365a7ddee35232c3fb83dc696836fd5cafea8a2cN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE