DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5132a215d0adf08ec2d3a99017c63e6f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5132a215d0adf08ec2d3a99017c63e6f.dll
Resource
win10v2004-20231215-en
Target
5132a215d0adf08ec2d3a99017c63e6f
Size
156KB
MD5
5132a215d0adf08ec2d3a99017c63e6f
SHA1
5f7adf80af5e0fa96e03cfc83bf195c3b62a339c
SHA256
ed330e6307c14cecaafa1ae0a97a1d9646235315106f7ef982fc924ba5fa8f0b
SHA512
df4262888fc20084bfe1fc054fcc4a0a2ff91cf1da5d430d0668df29313fcee618125a0727c8abbaf7de017eddf52134e6b39ae9ea0fb0d6b31bd6b275cf634d
SSDEEP
3072:2Qky+fvPiCrPZNNOQebbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7ouCE9A:SiAPPgwvP6bQ7yMP+DE827ouCE9A
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5132a215d0adf08ec2d3a99017c63e6f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE