DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
21ead546e29a0e680e7e8f5e647c17fc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21ead546e29a0e680e7e8f5e647c17fc.dll
Resource
win10v2004-20231215-en
Target
21ead546e29a0e680e7e8f5e647c17fc
Size
186KB
MD5
21ead546e29a0e680e7e8f5e647c17fc
SHA1
51ac1f836241e1006e6a1f022cba7659f64a6480
SHA256
48c0d3a7ca403b4ecef18969f3d89dc90e312a0391a22128988c281eae2d0d75
SHA512
08d5288b5127ec787a0be8b5375762ad46b87c14ba228707a35a4514db13fb65883d8044e0faacdb98fc1432c6068d1d7da283b8c4f51268a0f87bc981cf6a1f
SSDEEP
3072:+bE2mp84BaXZhns9LV8eaYd0+sORC0bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhN:OEn6cLV8eaY6VswvP6bQ7yMP+DE827+i
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
21ead546e29a0e680e7e8f5e647c17fc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE