MainWork01
Service01
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b911f3ccc39031fc77b5b5dc15e8c4c10642edb961e5dd1799bbae80888d5471.dll
Resource
win7-20220414-en
Target
b911f3ccc39031fc77b5b5dc15e8c4c10642edb961e5dd1799bbae80888d5471
Size
648KB
MD5
47cf2312142053973478a73c2221eea6
SHA1
6b50b6c1bb38de64ab2835387043e70e7add744f
SHA256
b911f3ccc39031fc77b5b5dc15e8c4c10642edb961e5dd1799bbae80888d5471
SHA512
5a41a77798991958097616fa5959f4ea39ca370a7513179f96c9a03524252690084a4a50b290148327aa9b8b8af88d24d2ea218dbfac47ac5b1b7cd7584efcb3
SSDEEP
12288:B0KFf26+No4uBo3qWiYBiDm4rQa2/b3H1pgStpNsVoHV6gffoY:Bf26+N2o3qWtBiDm4IjX1p7tp6N7Y
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
MainWork01
Service01
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE