DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
efeb6db5f1a4a9b2a595ab895e630892ac9e9020ca03148df8a2f794c76d82cc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efeb6db5f1a4a9b2a595ab895e630892ac9e9020ca03148df8a2f794c76d82cc.dll
Resource
win10v2004-20221111-en
Target
efeb6db5f1a4a9b2a595ab895e630892ac9e9020ca03148df8a2f794c76d82cc
Size
186KB
MD5
cf11c1e7f401105ffad70fcf8535dc90
SHA1
36202fc70d0ea4dc65cecf18b8202f3e8426042d
SHA256
efeb6db5f1a4a9b2a595ab895e630892ac9e9020ca03148df8a2f794c76d82cc
SHA512
0bd28c84d313da2ccb337a914f32cd4f8c6003798556821cc587357461f848e3fc07da22326bdff7fd961828a2fcaba95e93f9b6916fc9a0f739c542d3dfeae5
SSDEEP
3072:uny9fgQisdAjLcanNn62OJP9wocQ4bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxx:HIXxPns2OJPowvP6bQ7yMP+DE827j1
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE