CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
b4a15edf30604c1cc18641672522e8008c18255b1043903773f50f28ddf8caf5.dll
Resource
win7-20221111-en
Target
b4a15edf30604c1cc18641672522e8008c18255b1043903773f50f28ddf8caf5
Size
409KB
MD5
926c796fdbf89861df69abe02282bd92
SHA1
6bdb704c3f160604648d15e778619a8a4f341f86
SHA256
b4a15edf30604c1cc18641672522e8008c18255b1043903773f50f28ddf8caf5
SHA512
94306689bc8a2190118093f802e2cdb78464d3fc34dbfa3842a7350e67714696a755758b5bcddbe588a5bdc55bb3b796546199da7c37d08de180d67fbe1dae59
SSDEEP
12288:xKdAEmF9srlxerSF93dTldmDp4DmqRSHsDrv6B:xKdAE1hau93dTWDp4DmsDz6B
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE