??4CXMLParser@@QAEAAV0@ABV0@@Z
?GetReturnInnerTagCount@CXMLParser@@QAEHXZ
?GetReturnText@CXMLParser@@QAEPAPADXZ
?GetReturnTextCount@CXMLParser@@QAEHXZ
Behavioral task
behavioral1
Sample
799fb66ada273f01593353243646090e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
799fb66ada273f01593353243646090e.exe
Resource
win10v2004-20231222-en
Target
799fb66ada273f01593353243646090e
Size
3.3MB
MD5
799fb66ada273f01593353243646090e
SHA1
973d1fc524573bfd64019115ee1e5d9768be6f9f
SHA256
524eefc9717194524f0469bdb474e483c350025af945a7e0a9b98773bfbabaf0
SHA512
fcf929aa0881526870d19d4e9a1345c8ac1eb2839845f0da61e2503df1d878c13fba4895e4f3bb1b4771502fa9c2395052d40e978ad26f932f54b20bca7523bd
SSDEEP
49152:0nOjmEmxkIez0gL5wuZW0HCVU7TCejoA/Tvn1crmaClUK0jk8ASX+2FwlwTIf:04av8iuZWyqANzn1c6aeUK0jm0+jlv
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
799fb66ada273f01593353243646090e |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??4CXMLParser@@QAEAAV0@ABV0@@Z
?GetReturnInnerTagCount@CXMLParser@@QAEHXZ
?GetReturnText@CXMLParser@@QAEPAPADXZ
?GetReturnTextCount@CXMLParser@@QAEHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ