TMethodImplementationIntercept
Z9yYGjd1jf8GiU6FY5de9wi2
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
710e87bf9c3d8987e07034f19ce3c322.dll
Resource
win7-20231215-en
Target
710e87bf9c3d8987e07034f19ce3c322
Size
8.3MB
MD5
710e87bf9c3d8987e07034f19ce3c322
SHA1
7864d7ccdee6b055b38faa61e4ad3302f22257b4
SHA256
5162e97f2bdbc1f40dbc35af2d73c709d1668ca0ff4b277465feb767d7177ed2
SHA512
6f7dee1dc711807bdd23dbde8dbf5c66e5ce078d1a2300df2facb38d73a09d4b9ddae1fb597800993a8526d175d0a9150561fc01488a1047323b2f4a4d6b220f
SSDEEP
98304:HYpolurP2M08N7EjpbrEY9UoEjornDmWrb7K10WrByzq2ruroi52YjI7+whYYsi4:HYWlIuM05C8DYs22MoIiKGYu3wl
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
710e87bf9c3d8987e07034f19ce3c322 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
Z9yYGjd1jf8GiU6FY5de9wi2
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE