AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
5b7ffc469517fe9a7eaa6f90f3e37c35f745c6aa5d6be29ba9ed34a296fec34a.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5b7ffc469517fe9a7eaa6f90f3e37c35f745c6aa5d6be29ba9ed34a296fec34a.exe
Resource
win10v2004-20220721-en
Target
5b7ffc469517fe9a7eaa6f90f3e37c35f745c6aa5d6be29ba9ed34a296fec34a
Size
15.0MB
MD5
d9accacdf69d4e40ddbbb27323aa9c00
SHA1
6b39c2ecbf6c10351016a8eb0900fc191ce3615d
SHA256
5b7ffc469517fe9a7eaa6f90f3e37c35f745c6aa5d6be29ba9ed34a296fec34a
SHA512
4ac65d49dfcbe45bf90386cd112b057c031c8970b41ada6f3a17502c747395fe6ce60cbc602e74d36ee84b10c04f71dd3c633fbe1718480fb045904eeeb7d653
SSDEEP
196608:mJVPTWEUcxGYq7du9mqzMgz/ix+7XCFRG9tP2C9lh:mnPaUGYq7du9mqzTmg7XuRG9/
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE