CreateXmlReader
CreateXmlWriter
Behavioral task
behavioral1
Sample
FirmDriver.dll
Resource
win10v2004-20230703-en
Target
FirmDriver.dll
Size
3.2MB
MD5
d13dd0c2e6e80e64fa3cde87d3a5a572
SHA1
6056e2e614d210ec766bf94504d940d0fd2d194e
SHA256
d1091a64f035cd1f00517daaf8db0683b2539d9bb98e97d13d512067c4a26ffa
SHA512
c816d5268afec893b0180b1528d1971365c74534d4d6f9c3a0e9e07d606277225c7c74ca691cdd7d6e3cccad544d0ab04a64ed7f7507de97a632ae6bd629fcfd
SSDEEP
49152:1Abgv6QXm2UUYiMwWfij+/lXgGTkJZ9HBEl3cv3gjX7jvH3tjdKVNFzUDZvmaLIi:uAugPU1/lQQpJjXzq9U8SIknuOU+
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
FirmDriver.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateXmlReader
CreateXmlWriter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ