DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c97b9b7e535b84f44c108e6760d683b628e287fb68e5c0aab625636daad87e77.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c97b9b7e535b84f44c108e6760d683b628e287fb68e5c0aab625636daad87e77.dll
Resource
win10v2004-20220812-en
Target
c97b9b7e535b84f44c108e6760d683b628e287fb68e5c0aab625636daad87e77
Size
2.6MB
MD5
deeb3e029e4b8d85229ed679524ef768
SHA1
277979e83cfb41b7cdeed213cb287fa2b6a64bfe
SHA256
c97b9b7e535b84f44c108e6760d683b628e287fb68e5c0aab625636daad87e77
SHA512
487bac496c94d79803d91d517bafd1eea2ef4d0f6cee03a31e01ad301132714aa88a10372496d625d0eb23639ee607cf7b7951de0787f2e53394af2d8d5bf9f3
SSDEEP
49152:K/lkbifyPm/boJCUM3h2wGZnC0p/pmgHkNUgqKJZyB528qKdqbPpnlTwO:K/lkdPwb4TwGZnCe7Hk/VkBqKsbhlTwO
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE