??0CsvFile@@QAE@ABV0@@Z
??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
??4CsvFile@@QAEAAV0@ABV0@@Z
??_7CsvFile@@6B@
CreateObject
CreateObjectExt
Behavioral task
behavioral1
Sample
bd6fe297f86a6af935fe0735cb0e179e7e15da107e5920869aa56a5f077a28f8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd6fe297f86a6af935fe0735cb0e179e7e15da107e5920869aa56a5f077a28f8.dll
Resource
win10v2004-20240611-en
Target
bd6fe297f86a6af935fe0735cb0e179e7e15da107e5920869aa56a5f077a28f8
Size
2.2MB
MD5
4d1df5c86d7eefbfa7dfe26a2479fc82
SHA1
539e906506c71c3a91387fe29046eea1d45e1207
SHA256
bd6fe297f86a6af935fe0735cb0e179e7e15da107e5920869aa56a5f077a28f8
SHA512
7b9765765fe154cc888a1e34b93ca029bf0de0e4b9f4ef52fc68a5210bfced762ec9dd416b74f972e4fc5dab7c6380fd84b10ab307cd2d9daca8c5ea3edaba5c
SSDEEP
49152:BsF3k0r/Mm6r4C7A6SAPZFNbu/We/PcdFGZU1YwO7RXAwswy+XW:W+o/MhrFU6jbuOe/PcvfSRwGS
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
bd6fe297f86a6af935fe0735cb0e179e7e15da107e5920869aa56a5f077a28f8 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CsvFile@@QAE@ABV0@@Z
??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
??4CsvFile@@QAEAAV0@ABV0@@Z
??_7CsvFile@@6B@
CreateObject
CreateObjectExt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ