DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b90746fec0d4affe137c6069cb54e8fb55387008e7c53befaecb09586c0b870bN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b90746fec0d4affe137c6069cb54e8fb55387008e7c53befaecb09586c0b870bN.dll
Resource
win10v2004-20240910-en
Target
b90746fec0d4affe137c6069cb54e8fb55387008e7c53befaecb09586c0b870bN
Size
180KB
MD5
0001ba055f08363a4de928f5f8eb93e0
SHA1
daa8ccbb723c03a40ae0d56e61bb144d901d203f
SHA256
b90746fec0d4affe137c6069cb54e8fb55387008e7c53befaecb09586c0b870b
SHA512
abd08d6b27df5a7d97f1567d26a6d61e5da73f60ad8c86d8dbeea374b9d8168d5ab1e09f03d1b75dbc2bc06e779170022a5d788b90d6e32902562e29622fa8fb
SSDEEP
3072:svNtCEDbmiDPww0zDP61CzZhWbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVUR:mNMEDbmiDowYT61OZ2wvP6bQ7yMP+DE5
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b90746fec0d4affe137c6069cb54e8fb55387008e7c53befaecb09586c0b870bN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE