DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
70d28a780547d30d7da90c2c0c6827515268512cf8c1788e9397db3f61884274.dll
Resource
win7-20221111-en
Target
70d28a780547d30d7da90c2c0c6827515268512cf8c1788e9397db3f61884274
Size
620KB
MD5
7f283434355d7b5efa829141c183ac60
SHA1
07029454dceca126fa03ef95718196d7a2e27196
SHA256
70d28a780547d30d7da90c2c0c6827515268512cf8c1788e9397db3f61884274
SHA512
39c2f27949dd7d1ad4b8802a21b2207ad9d425194c8a32f3debe00dafd2e4225457ea150544755f44aa6e90d562f2e1496116fc6593ec593648fff7e30cff38b
SSDEEP
12288:uwWc0tooZq/io3HDblVPzr/RTRaADs1FyExiVLUFsRxYr3RjCUVszjrj:upVyoMao3H3ThRJDs6Exg4RGUVu
resource | yara_rule |
---|---|
sample | themida |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE