Target
FFWsRegister.dll
Size
3.2MB
MD5
ddc2bbf68ee6139b1e1e1eb7bd49156e
SHA1
39c55325f5d3d9c590fb0405f280cf87c401402c
SHA256
74b90770b1fa3f7dae797166aa0b4508503859ea73d7d7b185f64b7d38799217
SHA512
f88dfadb7def6f8dd03eb55dcae4bbbba199a7ef90934f925fd8ec399da283d4232da79c4da90346b8b3ae37b6d2ced4c9a112d6257dbb5a50e347bedb2147e3
SSDEEP
98304:FnTtzorQ4nm2EXbg1pl2d+rr4jqs6Uw0t+:FnxorQ4nsbW8+ds/dt+
| resource | yara_rule |
|---|---|
| sample | themida |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
??0RegisterHelper@@QEAA@AEBVQString@@000@Z
??1RegisterHelper@@QEAA@XZ
??4RegisterHelper@@QEAAAEAV0@AEBV0@@Z
?DoRegistration@RegisterHelper@@QEAA_NAEBVQString@@00@Z
?DoUnregistered@RegisterHelper@@QEAAXXZ
?GetEmail@RegisterHelper@@QEAA?AVQString@@XZ
?GetRegCode@RegisterHelper@@QEAA?AVQString@@XZ
?GetRegistered@RegisterHelper@@QEAA_NXZ
?UpdateInfo@RegisterHelper@@QEAAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ