SetExtChangeZip
UnZipData
UnZipDataToDirectory
UnZipDataToFile
UnZipFile
ZipData
ZipFile
_CloseD3d@0
_InitD3D@4
_smPlayD3D@24
fcEXP
Behavioral task
behavioral1
Sample
13a91a00124a1bfbe8d5636e8c1a293c558d85fcc8f8e83515a2b4661f9cdaaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13a91a00124a1bfbe8d5636e8c1a293c558d85fcc8f8e83515a2b4661f9cdaaf.exe
Resource
win10v2004-20220812-en
Target
13a91a00124a1bfbe8d5636e8c1a293c558d85fcc8f8e83515a2b4661f9cdaaf
Size
3.2MB
MD5
28d7f5c1e0390f129bf603a934bbc64d
SHA1
0d5b39432c5126cb19fdd50700e8400e17c23265
SHA256
13a91a00124a1bfbe8d5636e8c1a293c558d85fcc8f8e83515a2b4661f9cdaaf
SHA512
384474c0bce5563dbfe76cfa8a6560c0c89d049921b9ec8dba1f15b5364dc14d94bfe17ec1d96f17241d61e191f8fcd70254c15e7c653e8e7d4ddc4e4d256d52
SSDEEP
49152:5T8LqvC6YCoVFWAzHjy2fmQmBR3mUEQvPy1RBw4GhDX3RiV7FjrfSm:5gC5bAzH7fmNfZvqLB9kAV71rfS
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetExtChangeZip
UnZipData
UnZipDataToDirectory
UnZipDataToFile
UnZipFile
ZipData
ZipFile
_CloseD3d@0
_InitD3D@4
_smPlayD3D@24
fcEXP
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE