ChangeData
Init
IsGameRunning
ResetAllData
������ת������
����ת��
Behavioral task
behavioral1
Sample
d5066f6eb484e09f7c3eb427b1ce981ac2d2cf71aaa4d2aa2be126c65ff384b1.dll
Resource
win7-20240508-en
Target
d5066f6eb484e09f7c3eb427b1ce981ac2d2cf71aaa4d2aa2be126c65ff384b1
Size
3.2MB
MD5
458d9dfeb81e8711b5696bc0ffd3ded6
SHA1
4472ac0990d473adf11be604b4f820d25e9f501f
SHA256
d5066f6eb484e09f7c3eb427b1ce981ac2d2cf71aaa4d2aa2be126c65ff384b1
SHA512
aebf9aefa9227c1fd9b00b98748efa8101bcfa734db94ea15a9efa49af3f1edd24c86c94f7410d9208edc30abdf0f385c04cb6b9961097703e9effa21c1c91ef
SSDEEP
98304:ipDHq5DWoLo+p4xWpc4uTdjiZM2RULBHOIL8x:ipec+phpc3TdufG6
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
d5066f6eb484e09f7c3eb427b1ce981ac2d2cf71aaa4d2aa2be126c65ff384b1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ChangeData
Init
IsGameRunning
ResetAllData
������ת������
����ת��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ