DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Static task
static1
Behavioral task
behavioral1
Sample
d005a8cf301819a46ecbb1d1e5db0bf87951808d141ada5e13ffc4b68155a112.dll
Resource
win7-20220414-en
Target
d005a8cf301819a46ecbb1d1e5db0bf87951808d141ada5e13ffc4b68155a112
Size
2.4MB
MD5
178b3301656b43e46678fbbda58e9af7
SHA1
83a951b61a9bd2ec003a4004d13023368d1c8d55
SHA256
d005a8cf301819a46ecbb1d1e5db0bf87951808d141ada5e13ffc4b68155a112
SHA512
1f8d19dc85164375c22e3ebcf357ad6666c4ccac0b75006cd4bfd7824d3273ba4e3c67ffd1bc2cd261d640da2f5812e2b509f728f1fb771de42f65742a18de0e
SSDEEP
49152:U1Y60SANj4KrFakICZnim2Ybv9e9xEoyiUJMJVnuJ4:STyJrFaknl2Yjynuu
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ