DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Behavioral task
behavioral1
Sample
9eeec764e77bec58d366c2efc3817ed56371e4b308e94ad04a6d6307f2e12eda.dll
Resource
win7-20240221-en
Target
9eeec764e77bec58d366c2efc3817ed56371e4b308e94ad04a6d6307f2e12eda
Size
2.4MB
MD5
f2cfdaa117aa3978cbc7cec35b141192
SHA1
13a6e0db08feab3bb34bddf26140fa2636919bb7
SHA256
9eeec764e77bec58d366c2efc3817ed56371e4b308e94ad04a6d6307f2e12eda
SHA512
13939ad6a4b318123967a6f000c51f4fbfd9d834b33c62e3b8fab39fbac789c9841b4e281eaeaee3ba342a10e6f375340c6240b5acbbf7f21aefc15d38f7f010
SSDEEP
49152:U1Y60SANj4KrFakICZnim2Ybv9e9xEoyiUJMJVnuJC:STyJrFaknl2YjynuM
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
9eeec764e77bec58d366c2efc3817ed56371e4b308e94ad04a6d6307f2e12eda |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ