TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mYQx5XuMHwHu2Y18cja35ZMJ
Behavioral task
behavioral1
Sample
8f501ce7f23c7684bbb770917a536ea4.dll
Resource
win7-20231215-en
Target
8f501ce7f23c7684bbb770917a536ea4
Size
8.3MB
MD5
8f501ce7f23c7684bbb770917a536ea4
SHA1
8ceb81f5bd20929b387ccfa62889c677196d3791
SHA256
342af0d3b64a214c0346d3612e5e6111bed05a0b2de61aff890775708a996295
SHA512
93a1122d19e2f6cd00548ef3413b24b91b4376030a50becde7c08dadd5b9e019900694e1b7dbe4840ca0012cb66f590c3e7b60910702a88785807fd62950ebc6
SSDEEP
98304:ryEAmpcmm0E/5OH3CMFfZM7Xm4N/fJqv8wn3wWicV4yelhctvApJsKAmfWGmq2oh:3Q/5YpDqZfC/t40Dmryg6y7SG
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
8f501ce7f23c7684bbb770917a536ea4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mYQx5XuMHwHu2Y18cja35ZMJ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE