CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
b81569c4039ab681b324bdbb2ff2229a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b81569c4039ab681b324bdbb2ff2229a.dll
Resource
win10v2004-20240226-en
Target
b81569c4039ab681b324bdbb2ff2229a
Size
412KB
MD5
b81569c4039ab681b324bdbb2ff2229a
SHA1
d7afd11a9ff7ca0566e0655f46101139c244f834
SHA256
79ead613264180991bca30d4f623f497148e00891435bf72654381fd76d7b257
SHA512
ba9c66f96cbc156d4079b1e2fa96d862de146a8d9c1954668d686a03f3a3f8c8d3e4d8d528a1220e7bd2ef0216ef66c09f949deba34483bb82eba7f8eafdb4b0
SSDEEP
12288:AAx8FSt0n26vjTJdmeylRSHsDrJYC84GCc:oI0rvjTytTDlYC84s
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b81569c4039ab681b324bdbb2ff2229a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE