DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
48b7a7cd6ab146256272bf26d54ac46f26b2bb4e20400e83fcf11fe2964b4bc7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48b7a7cd6ab146256272bf26d54ac46f26b2bb4e20400e83fcf11fe2964b4bc7.dll
Resource
win10v2004-20220812-en
Target
48b7a7cd6ab146256272bf26d54ac46f26b2bb4e20400e83fcf11fe2964b4bc7
Size
482KB
MD5
6835d861c83fc7a36abbd161d7beecc4
SHA1
a2edd2fdc426ae53ebe1f9691c929d9e6f48b942
SHA256
48b7a7cd6ab146256272bf26d54ac46f26b2bb4e20400e83fcf11fe2964b4bc7
SHA512
166fe06a43724b817b568e1e20b279e606bc3331c984a13d6061c4ac514a1d6f10ffe9247f35c6fa16e00ec7c0deaa63566c4690c315de5179361c8fc4f48c92
SSDEEP
12288:AVn3pNCF3Z4mxxoteaxixjTKEJGJp9WMXy:onZEQmXoUa4jlJGJp5y
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE