DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8a91912f4bcda7ef70e437588cd3d20b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8a91912f4bcda7ef70e437588cd3d20b.dll
Resource
win10v2004-20231215-en
Target
8a91912f4bcda7ef70e437588cd3d20b
Size
177KB
MD5
8a91912f4bcda7ef70e437588cd3d20b
SHA1
1a2d4f69b445d0e5b31e30929eda3df390acd692
SHA256
9997427f86dd14f0954212dcc0bc967feae631404dd0f40e449afa0779299698
SHA512
d60cf8ec84c05d21cd568d14ee4d5ca1416ddd8a61d2b5741ad73d98bdd623b3ae80c89a87acdd8225a9aa249b125479f8d1a7edc7610069a9422bc3542866c6
SSDEEP
3072:rJvtDsHxFqBs884XLxTPbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7OyBIh:FvtBBsTMwvP6bQ7yMP+DE8271yd
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
8a91912f4bcda7ef70e437588cd3d20b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE