DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a75c19b1f5527040ec98148bbcaf0449b054e8a08a12fd0c47ffa9b64f9cd0b4.dll
Resource
win7-20220812-en
Target
a75c19b1f5527040ec98148bbcaf0449b054e8a08a12fd0c47ffa9b64f9cd0b4
Size
857KB
MD5
46d8b5659355599ba2f7105b9d4fbf7a
SHA1
6c6a81a640ec685b62f45b445945c05da1f1dbfa
SHA256
a75c19b1f5527040ec98148bbcaf0449b054e8a08a12fd0c47ffa9b64f9cd0b4
SHA512
482aee68fef0a091430cdafb97b51609dddc43a8d6a97df5569de904a55f961567abc2db3f02977b828a968caa2a2cf2761350e242c0198ab40cf7f6777d326e
SSDEEP
12288:l3KpeBRwUgw3z+MyVTBF/o6DmFK8Ic9PI2UOJDezDOVYHZAxLCYTLiwothcw17kJ:lagBRwy3z/ybvCFK8vZtUA2baxJkDS3
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE