DoMainWork
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
aa166a247a612ab74a6cadfd95800da0e4b2257d5442fd4e8558ceb05f907f2f.dll
Resource
win7-20220414-en
Target
aa166a247a612ab74a6cadfd95800da0e4b2257d5442fd4e8558ceb05f907f2f
Size
567KB
MD5
362b306967fa08fa204e968613c48b54
SHA1
1cf8efddf5f9fc1d31084118e1d83deadee06f02
SHA256
aa166a247a612ab74a6cadfd95800da0e4b2257d5442fd4e8558ceb05f907f2f
SHA512
aeb8a09416fd1c639bffa5ee040ea67bccb5bcd40e79bc4edba9c38cb89789d0775c82a111c2c5de5a87b71783bc76aa243619a8405b42f50874f5ba76b05476
SSDEEP
12288:lyMYXbKuqOU43aH55L9Poxai1ABOy12d463NhJZGdbAD:lpYXbKuqkKb9oMi1OOyUd5JwBe
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE