DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0bf49e93cb2485fcc4a5b5a7acfefcf7c48c3d7a9e93df97e33b3fa900582b67.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0bf49e93cb2485fcc4a5b5a7acfefcf7c48c3d7a9e93df97e33b3fa900582b67.dll
Resource
win10v2004-20220812-en
Target
0bf49e93cb2485fcc4a5b5a7acfefcf7c48c3d7a9e93df97e33b3fa900582b67
Size
304KB
MD5
63ff2918e78df4cf85baf61f77d4c2cb
SHA1
284393121f46b47f8211ffc1ec0be0aa6b0dff4e
SHA256
0bf49e93cb2485fcc4a5b5a7acfefcf7c48c3d7a9e93df97e33b3fa900582b67
SHA512
99a8e8bed4972c3b2a5a8b21963d9c0ed92459717484ea25b8017ed13c90975a65e3bf97659ec558180f2e9e5cce56c61a3e4a1d210a99556a044bfebf0ecee9
SSDEEP
6144:+isjaf1UuqPi9PoxupV+RMgKgb9Slsk7BPXS5Es2ATbwiWFJdMqd7lYt:rs+f1g69P8upVxbgbolhaEbAA7Pyqd2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE