DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Static task
static1
Behavioral task
behavioral1
Sample
07c87d036ab5dca9947c20b7eb7d15c9434bb9f125ac564986b33f6c9204ab47.dll
Resource
win7-20220414-en
Target
07c87d036ab5dca9947c20b7eb7d15c9434bb9f125ac564986b33f6c9204ab47
Size
2.4MB
MD5
e1aa32400b398acc3f13500e2913266a
SHA1
f31d5f086ff20a6dcd0bdb6bae572cae647b8034
SHA256
07c87d036ab5dca9947c20b7eb7d15c9434bb9f125ac564986b33f6c9204ab47
SHA512
9d241236e953e80259ad4600d7a69ecc1c18deb89e0ac27e368eed73e75182b5fdb10aaacb9922a8db2021935a5e111e8676db1efc9cbb8a1b1d118556f21919
SSDEEP
49152:U1Y60SANj4KrFakICZnim2Ybv9e9xEoyiUJMJVnuJr:STyJrFaknl2YjynuZ
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ