?KeyboardProc@@YGJHIJ@Z
?UnHook@@YAHXZ
InstallHook
Behavioral task
behavioral1
Sample
2238f13df4b8030df3c4dc6c528587cf0a0fcace5c66d54e8bfb4f492000de04.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2238f13df4b8030df3c4dc6c528587cf0a0fcace5c66d54e8bfb4f492000de04.dll
Resource
win10v2004-20220812-en
Target
2238f13df4b8030df3c4dc6c528587cf0a0fcace5c66d54e8bfb4f492000de04
Size
1.3MB
MD5
8a5667fea0602f8c99968ff0488e20db
SHA1
b29a8f2f1106cd21e6596d9248ec23714b016b76
SHA256
2238f13df4b8030df3c4dc6c528587cf0a0fcace5c66d54e8bfb4f492000de04
SHA512
fa54e204e045f0b82ca0e5ca57d7f5c239672c39e68783c3c224d81b74acf19a9a437523b93ccee7468424c0e5ca7592916583b732bd9caa87687af55640b4a4
SSDEEP
24576:ySuhSc+1GPFXxCWDb0OfdXAMYdj1ObWNt1y8CQ2a+YYQjb:Hm+12/DhVAnB19NKf1Qjb
Processes:
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?KeyboardProc@@YGJHIJ@Z
?UnHook@@YAHXZ
InstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE