DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Behavioral task
behavioral1
Sample
a573a413cbb1694d985376788d42ab2b342e6ce94dd1599602b73f5cca695d8f.dll
Resource
win7-20231129-en
Target
a573a413cbb1694d985376788d42ab2b342e6ce94dd1599602b73f5cca695d8f
Size
2.4MB
MD5
5bf9b9d44414ca71dfd7159b00cbc8d6
SHA1
7bee238bbf995a118c1cd22299cfab8732d71eb2
SHA256
a573a413cbb1694d985376788d42ab2b342e6ce94dd1599602b73f5cca695d8f
SHA512
2ac034181a8be1d28d5fdcda6ac60ca2f51bb8a477f294804800fec5d54633064e5fa0be7ad82cec27164242ba5f6aafaa15ac8336d9054af88ec2186ea3f6a2
SSDEEP
49152:U1Y60SANj4KrFakICZnim2Ybv9e9xEoyiUJMJVnuJG:STyJrFaknl2Yjynu0
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
a573a413cbb1694d985376788d42ab2b342e6ce94dd1599602b73f5cca695d8f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ