DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
c59ee54f1873b8a8297696da343c1599214e8a11836e26e836e15450c734a32a.dll
Resource
win7-20220812-en
Target
c59ee54f1873b8a8297696da343c1599214e8a11836e26e836e15450c734a32a
Size
750KB
MD5
3228dbe3809bd924e0b3e802592c34a0
SHA1
ca09322f1413a73101f6298e434a3446fb5f6838
SHA256
c59ee54f1873b8a8297696da343c1599214e8a11836e26e836e15450c734a32a
SHA512
9c8736b796a72bc4516b0a886589330cbaa55cf14aab798ee7c44b4ee2f7f2db16bb3b2a1ff9cf1a1440a18e2601d86ca2fdeaf1fda9170abfc4213472b05390
SSDEEP
12288:ER5H1TGLaXD/r+wNZNqp6r3SgyXIKcOzN+IldpxvhvviFbJgdm8TIxAqO7Wz2:kQE7KKv9ZKcyrpxvh1UdOG2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE