TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
rd1b83lt8kxbx9ym4q8uj6c
Behavioral task
behavioral1
Sample
9639eebcf3b5e89a4a179e86cb365b02ab279961530283006cfb6fc3f7a8d826.dll
Resource
win7-20220812-en
Target
9639eebcf3b5e89a4a179e86cb365b02ab279961530283006cfb6fc3f7a8d826.dll
Size
10.5MB
MD5
b02a0578b76ea32b9a246f34ee9144e0
SHA1
c57e8041e8a391ba78dde7e545c2a38641a9d4cf
SHA256
9639eebcf3b5e89a4a179e86cb365b02ab279961530283006cfb6fc3f7a8d826
SHA512
34dfc53f2d70d0eac15802cf703ab0db4e7efb749e777ac3783c35c5a3846e9bbfffdbaf40bfe855fe5ec9746928c3659ebf9c8ea66de6ff3d71fd19f955e770
SSDEEP
196608:QHpkykStnaGpU1duyryp4Gf0ijXzsQvygsny7u7irp6Tlji1H3tTs:22Iah810SX89yK2AT01H3q
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
rd1b83lt8kxbx9ym4q8uj6c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ