DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0264fc32a3006bf0597547e5b8f9ff2c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0264fc32a3006bf0597547e5b8f9ff2c.dll
Resource
win10v2004-20231222-en
Target
0264fc32a3006bf0597547e5b8f9ff2c
Size
182KB
MD5
0264fc32a3006bf0597547e5b8f9ff2c
SHA1
d0f897b1ae1f6b9302c856c2b019fb30dbc0a264
SHA256
aecee8d9510bece27f8a00f57b831be762c62c84ca51cfc7b9dd28a5490b957c
SHA512
f8454803dac3a5c15d82bd404e9760f7bbfabfc64db138c48e4c4bfb7fd3d8956e7856fd16483fd2a57c5d536d878b674b33ae168d6fdf50caacdecdb9f8ff46
SSDEEP
3072:JbwEXmeHlT1a/aA//ufmjGhHbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7U:JbwxQlT1a3XuKGh7wvP6bQ7yMP+DE82Y
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0264fc32a3006bf0597547e5b8f9ff2c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE