cellebrite_end_decrypt
cellebrite_get_char
cellebrite_init_decrypt_module
cellebrite_init_new_python_file
cellebrite_init_new_python_file_with_fd
Behavioral task
behavioral1
Sample
9d3822fcb1cad069aa8a63b2984db74da3f6f070387b3726af48fe621ddc9870.dll
Resource
win7-20240508-en
Target
9d3822fcb1cad069aa8a63b2984db74da3f6f070387b3726af48fe621ddc9870
Size
2.1MB
MD5
3dbffa2a48817b34388b3450f3053a20
SHA1
89248c6156793806d08b09a5114a3111c24c1b22
SHA256
9d3822fcb1cad069aa8a63b2984db74da3f6f070387b3726af48fe621ddc9870
SHA512
d2c344a05604a55f238bdc99f3df77c158ab205f66f36cb2194b8cd986a13ac7566ba27b1445cd3f37ca4b69201f04fd396c5d25fb6b3ccfb4969b611361e0cd
SSDEEP
49152:8uNjJmUarg+c0xpXqIhLxtK3Y5sLJg0IIDJhxZEkDkRNCCO:/OUarTT9X/tMNg0IOhxSUkRoJ
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
9d3822fcb1cad069aa8a63b2984db74da3f6f070387b3726af48fe621ddc9870 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cellebrite_end_decrypt
cellebrite_get_char
cellebrite_init_decrypt_module
cellebrite_init_new_python_file
cellebrite_init_new_python_file_with_fd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ