freerdp_free
freerdp_new
Behavioral task
behavioral1
Sample
74d4f50136e63c0f119e8ef7b3ce00a12e8ab54dfcaf4478d76f375fe2d9430b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74d4f50136e63c0f119e8ef7b3ce00a12e8ab54dfcaf4478d76f375fe2d9430b.exe
Resource
win10v2004-20220812-en
Target
74d4f50136e63c0f119e8ef7b3ce00a12e8ab54dfcaf4478d76f375fe2d9430b
Size
1.3MB
MD5
e59fe8b472170e31ed9fdeab424a7906
SHA1
2596293565fbbeb1d317dc473363380ec81cfb53
SHA256
74d4f50136e63c0f119e8ef7b3ce00a12e8ab54dfcaf4478d76f375fe2d9430b
SHA512
41701fb10302e2a6476e5d1b52ef70c3e8bf31747fc4b5f5737e834293815aa5324ac55ceb5082d0443dfc0e711fc9d3e4ce8c66c86358d4b1f98804601dd555
SSDEEP
24576:C8ChOheVJHdRx1iLfxAwngCN6iJZ8oO/BddP0EvsJypeyxU6uaRRkoFL9eTVzWtD:C8CcCdb+b8HjVuagomUtD
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
freerdp_free
freerdp_new
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE