DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Behavioral task
behavioral1
Sample
49c913954a08251a66ac623899230fb4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49c913954a08251a66ac623899230fb4.dll
Resource
win10v2004-20231215-en
Target
49c913954a08251a66ac623899230fb4
Size
38KB
MD5
49c913954a08251a66ac623899230fb4
SHA1
9458ea89bd1e13be3c3577a4d6ba683764912fac
SHA256
a014b0e583b73abbba37757493fb9a4f4cdc64f3eade005da280bc8065adc23e
SHA512
268267184e17f0212b1302889086d22a2f87a593007e5fb91982f3d967c24ec930c905f3d03e4750c69e66770f4dcb9f8d35dfbf4835f0ce8e47e2319a4225af
SSDEEP
768:tZkDpQPaT9RNHPcluHbv0gV81YSKR8HPT/KJWxPha5Pi:Gpv9R9cl8L09nKR87/zwi
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
49c913954a08251a66ac623899230fb4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE