DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
1bda628f810b8141cf87052fbc6c496b250c6649a8c9c69e9472c95408f63506.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1bda628f810b8141cf87052fbc6c496b250c6649a8c9c69e9472c95408f63506.dll
Resource
win10v2004-20221111-en
Target
1bda628f810b8141cf87052fbc6c496b250c6649a8c9c69e9472c95408f63506
Size
361KB
MD5
36a698dfd404fc6f42206f6039525b30
SHA1
6ed9c9bbefb2c441da837433d31608b468ab8ec3
SHA256
1bda628f810b8141cf87052fbc6c496b250c6649a8c9c69e9472c95408f63506
SHA512
c287ed1d56c6b8aa3889146ee966b43736c154a36ad9cc34d2cee57f9f622a27ddb619313f5a619ed6558e6a74b6d34e1e9b8dca652f817600d36f8240ebf491
SSDEEP
6144:rWfXT8sWYVoh+/1t2CS0tmOlsk7BPXS5Es2ATbwiW4JndA9qVi:KfD8sWaoQ/I0tmOlhaEbAAmJd5i
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE