DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
6e08118d98abce1cf35046e6d4832080.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e08118d98abce1cf35046e6d4832080.dll
Resource
win10v2004-20231222-en
Target
6e08118d98abce1cf35046e6d4832080.bin
Size
225KB
MD5
6e08118d98abce1cf35046e6d4832080
SHA1
d0ff0f659cc49ce1555ac3e3499fd613bb9c07da
SHA256
10d78195830230e799213888f4c78cf43cbb94c7518f77a5f7b39802a8d467df
SHA512
b16d76f9cb0459426cd3230768f66cbf540a0c5bfb6e79c448fb2d3a37ea29b1a9f2c9e773c2c8f68cb7e66cfa85eb60a210148480e89e8d0a80edc36613e029
SSDEEP
3072:LKb2OXMHX8iEXXjzcOf/FVSS0l9zM6Kb54AlkF0+yUtppJ4ebzk/UfIg8ZOZmn6v:KyXudf6S0l9Ipt1lSYck/UfQQsny
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
6e08118d98abce1cf35046e6d4832080.bin |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE