DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cb0a5ea130e43de3017b1bfe909def9d3b392ae6168dbc6681bb86b73acdcf77.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb0a5ea130e43de3017b1bfe909def9d3b392ae6168dbc6681bb86b73acdcf77.dll
Resource
win10v2004-20220901-en
Target
cb0a5ea130e43de3017b1bfe909def9d3b392ae6168dbc6681bb86b73acdcf77
Size
333KB
MD5
6ab0d3d562ae2530efbe830f33ae57d8
SHA1
2eb3eb799bb28e528ffeb530fd76c20bbf3e16ad
SHA256
cb0a5ea130e43de3017b1bfe909def9d3b392ae6168dbc6681bb86b73acdcf77
SHA512
bf7fec27c8c2f10237251887c9d72078984faef085adebf6fd956a13e347745013732644e01c68084fbb7a67371c7888d37dbb39c2ce4b7dcfe9a0f50bd3530b
SSDEEP
6144:ntpwkILgM2u+nmzK6QgSuHL5vj6pNp+1quBJ9wYvEJdugFqVHu+PJ:nbwkIEGpzK6FSkFvQ+1quBJ958ugGDJ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE