DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f0f9b8dc5807c7da0ae37d8cbea8c3c94d7baa30c0653919a92bc7e3e87479ff.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0f9b8dc5807c7da0ae37d8cbea8c3c94d7baa30c0653919a92bc7e3e87479ff.dll
Resource
win10v2004-20220901-en
Target
f0f9b8dc5807c7da0ae37d8cbea8c3c94d7baa30c0653919a92bc7e3e87479ff
Size
199KB
MD5
84f21c2f3e98e3fb1a25872f4210f8ac
SHA1
f9e89d89ec90dd5e7af3b9b3974ea663cfcc2399
SHA256
f0f9b8dc5807c7da0ae37d8cbea8c3c94d7baa30c0653919a92bc7e3e87479ff
SHA512
47e6e34b3c6e999601d967b78be9c4301afd259c13945f738f49b653edce5e1452f63a3856b4f43e053e9b4f3bd956a47a20e5f26c03091b49283bfed9b1f6b4
SSDEEP
3072:jdFo6Xalgo/NkW8lWRkNpZHPImtS5Es2K9Tbw9yDxAS+Ry2/UWqZ+:Ju1lgkkW8lsk7BPXS5Es2ATbwi0wjWq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE