DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
9a2eb6d98d5413cfd9cef0390fe4d35e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a2eb6d98d5413cfd9cef0390fe4d35e.dll
Resource
win10v2004-20231215-en
Target
9a2eb6d98d5413cfd9cef0390fe4d35e
Size
365KB
MD5
9a2eb6d98d5413cfd9cef0390fe4d35e
SHA1
5e40f739b19c731b951c14188bc4c95c71801484
SHA256
e43ad0c59b9d2e4df7d3ed2765d67708c93b43bfc4ad786eb235b2a86dd748df
SHA512
c78ead2fc2b2344f213ab8688260e3af3d732157619d31c7f6ace6d93567bdd85bbbaa04d6211889887e1309f55f779491d7df6ed0b1667fece8261dc211326f
SSDEEP
6144:hNaRvnynv/TUsHhI966AGkAjOpoaY7DAAY27yZniIms+QTfxG8Zaf:hQRvEv7Bq6xGJOpqHRypiI3FW
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
9a2eb6d98d5413cfd9cef0390fe4d35e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE