AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
085b69e6800df27c4fb91dced127b2d7f35c42666d794d03f4b994f61f1c1de1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
085b69e6800df27c4fb91dced127b2d7f35c42666d794d03f4b994f61f1c1de1.exe
Resource
win10v2004-20231020-en
Target
085b69e6800df27c4fb91dced127b2d7f35c42666d794d03f4b994f61f1c1de1
Size
4.7MB
MD5
24a107896c5648a80a9bdf101b5221e1
SHA1
7911f0de049e8ee634259f4735eebb66cea4aa92
SHA256
085b69e6800df27c4fb91dced127b2d7f35c42666d794d03f4b994f61f1c1de1
SHA512
82b8914ae43ded96655b4c8fc4ba23890c8df01c41e6cb0db3903e5ee56be7fdcf8f42cee0e5ea97bc4f63243c970ef8e48baf47dd2c97a96cf1474c402ddf48
SSDEEP
49152:wJpde/7wCeEAkIIFAcPlJNIpHXMo+i9Q9c9LQPWLWmv+poHw:Ipde/7wCYKaQ9+L/LWO4sw
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
085b69e6800df27c4fb91dced127b2d7f35c42666d794d03f4b994f61f1c1de1 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE