DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a5cff586568e12cdd43bf465e4244a9de87da0324a72e94f9f929955b5b4ab11.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5cff586568e12cdd43bf465e4244a9de87da0324a72e94f9f929955b5b4ab11.dll
Resource
win10v2004-20221111-en
Target
a5cff586568e12cdd43bf465e4244a9de87da0324a72e94f9f929955b5b4ab11
Size
429KB
MD5
d8ecf9dd9c74caa6a9926cc723e1c2aa
SHA1
f1fce19c7cca5724552e82377fb020bc80c042c3
SHA256
a5cff586568e12cdd43bf465e4244a9de87da0324a72e94f9f929955b5b4ab11
SHA512
6dcaf303a45316d2de014e8f086910a160b13535f23d7ea5845ea6fa8585d10eefe16c8a98d876a49a7e1043ebec378d18eb3ab6861bc97c9f01097c3c40307c
SSDEEP
12288:V9xfpKEND+yoVnfQ6vR7IW4LaIlhaEbAAmf/f7Px:NNyyo9Q6p75Xmsltf/fTx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE