TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
zTxk5zmfdJ1DikEMV0WBlT
Static task
static1
Behavioral task
behavioral1
Sample
GVM78OzM1W-vszr59Lp9izoRBGubDojTZxoqJlOuYZw.dll
Resource
win7-20220414-en
Target
GVM78OzM1W-vszr59Lp9izoRBGubDojTZxoqJlOuYZw.bin
Size
5.2MB
MD5
9a9e31dcf05385a8d07124321cf2ae36
SHA1
805bd322e28fe6ebb3b6d5edece0122b9cc585f1
SHA256
19533bf0ecccd56fefb33af9f4ba7d8b3a11046b9b0e88d3671a2a2653ae619c
SHA512
7ed845cc9465eacf6a0526db6a4a5129925e546206d87b8b51589679069a01db1190446a5610c7709a3a7748cfbf2a1a83e7f0cd2cccf8c80f2e35edeef8f8fb
SSDEEP
98304:SPDDw9Zn03o1FnySfMbF9jVyaNaA8ee2oRKkIc8rcBq3DqBHrNHXgTit:6E95vny2Mx9jIZeZogkYrcBq8N
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
zTxk5zmfdJ1DikEMV0WBlT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ