AddHide
DriverLoad
DriverUnLoad
P1
P2
P3
P4
P5
Behavioral task
behavioral1
Sample
65567e867128d7ad7df11270644502de.dll
Resource
win7-20231215-en
Target
65567e867128d7ad7df11270644502de
Size
3.0MB
MD5
65567e867128d7ad7df11270644502de
SHA1
3a5606aef212cbcc76f66ca06d98ff0576a5bc61
SHA256
22e0031a94293cd0b5a0f680df2b80270de0612129c11649c2215b8263886e4f
SHA512
2b1527a3f052908392c6a2f066b406847d340f6ccb4ec8d386cb71b2b1a58f068556a098ef0d341eb169d2824cb60d25f401eb3f7f9f7118d4755f070c187e03
SSDEEP
49152:NtTCW48qS5r4JfYF65Du6bGfAGpntI9Od6jf6uyCLG4hhHxxKvgXS108:NHqS5kfYFuu6MAGDI9uy6QLG4Lx4SSy8
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
65567e867128d7ad7df11270644502de |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AddHide
DriverLoad
DriverUnLoad
P1
P2
P3
P4
P5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ