DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
85236b6c6b65706d52de9c61f41b62f7f824af131e4833f0e12ef4dfe8f95a63.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85236b6c6b65706d52de9c61f41b62f7f824af131e4833f0e12ef4dfe8f95a63.dll
Resource
win10v2004-20220812-en
Target
85236b6c6b65706d52de9c61f41b62f7f824af131e4833f0e12ef4dfe8f95a63
Size
656KB
MD5
54c935884d05b6e995b56ef87a0f233f
SHA1
00b8079bddf4f71c49522758434230fb082578c6
SHA256
85236b6c6b65706d52de9c61f41b62f7f824af131e4833f0e12ef4dfe8f95a63
SHA512
56fe253682e367c917d8d9e00de0e4cb5ba0cbfc17686ec0dcd96b162824870dd49662ba7ada877df2736fc962c0a4a595cbe41a421b841136353bff2f0ecad3
SSDEEP
12288:a7rMZYSwd6ryFDsebnte+aGNHNEglhaEbAAsgzglxZ75:a7rWYSwoefZuWfslBIIb
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE