DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Static task
static1
Behavioral task
behavioral1
Sample
2d252c51a29f86032421df82524c6161c7a63876c4dc20faffa47929ec8a9d60.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2d252c51a29f86032421df82524c6161c7a63876c4dc20faffa47929ec8a9d60.dll
Resource
win10v2004-20220414-en
Target
2d252c51a29f86032421df82524c6161c7a63876c4dc20faffa47929ec8a9d60
Size
6.4MB
MD5
49e7fb3c3eb9d8bc21c7c7e38cf787f1
SHA1
d5428a5316459f41fa5ae3cc254cf0cba32dd95c
SHA256
2d252c51a29f86032421df82524c6161c7a63876c4dc20faffa47929ec8a9d60
SHA512
5b4f3a0aceb02dd4557df21dab51b5a3003d0d9120ad875ad6fa2302524b1a416b982980eeb8728a207e74ea2b5b23cabe3fa65ff9716c19718fed84fb33e004
SSDEEP
98304:c9aTB9PDe9Bqno7I5YCF61xNNhH2kxq0VVE7TyJrFaknl2Yjynu:Keno7I5YuyNNhWkxRBr4kn
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ