SpInitInstance
SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
de90e611bc3f46a6a7aab948800a2558003bc850d69ebbda672379845e79cbe9.dll
Resource
win7-en-20211208
Target
de90e611bc3f46a6a7aab948800a2558003bc850d69ebbda672379845e79cbe9
Size
3.6MB
MD5
97e5c0fe8089da97665a22975e2c86de
SHA1
d5fa9362e37b31c61a778c0d05c3c3a784ec2118
SHA256
de90e611bc3f46a6a7aab948800a2558003bc850d69ebbda672379845e79cbe9
SHA512
9de1164c48acd11cbaf56c1a5d2f81efee1eb18fa6f0cea9e9a7fd2c9b61b055aa3c8347712ba1d30b3cbe9bdf20b98fb9dc55773e4c70219ac93799c42e4af1
SSDEEP
98304:NgEM4ej1Dt3NlRnFA/b3MkbiX0z2Ojqwn3oN5FBQp:4FjJ1ReWX4jREFB
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SpInitInstance
SpLsaModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ