DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
29edfc90906629541f25eecd0a2536302d54d11902e69b915b90b20e7466e2f0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29edfc90906629541f25eecd0a2536302d54d11902e69b915b90b20e7466e2f0.dll
Resource
win10v2004-20220812-en
Target
29edfc90906629541f25eecd0a2536302d54d11902e69b915b90b20e7466e2f0
Size
179KB
MD5
0b2f757976457f20aaaf8f794be51770
SHA1
30922958deb577e7996dd90c479f741f91955d76
SHA256
29edfc90906629541f25eecd0a2536302d54d11902e69b915b90b20e7466e2f0
SHA512
08a211a5f9c7441deb854c0faae3681eb353b44b0363cbf187423fb1d2641d6c8da4db958a67bbd39fa3055897f1c7e1d752be12a9b126535a511e4675018eb1
SSDEEP
3072:8ONe7f8JElKg93WiGOdYuylEmbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVUZ:bylKg9miGYfM1wvP6bQ7yMP+DE8271
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE