??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
CreateObject
CreateObjectExt
Behavioral task
behavioral1
Sample
c33e0f8188f280171361c907770357c4d61e58ca9e94cabdc0bdb7e94a6d5386.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
c33e0f8188f280171361c907770357c4d61e58ca9e94cabdc0bdb7e94a6d5386.dll
Resource
win10v2004-20240611-en
Target
c33e0f8188f280171361c907770357c4d61e58ca9e94cabdc0bdb7e94a6d5386
Size
2.5MB
MD5
67ed0ba02875c40e3440f37a2157634b
SHA1
2daf596b186c2452159862ef58fd4da9b52e1f92
SHA256
c33e0f8188f280171361c907770357c4d61e58ca9e94cabdc0bdb7e94a6d5386
SHA512
30893abe9f0e36426ce0836e277ebf402325c806617e019f30a3b27d93d81f741b6e65572df36e62174c79d2869a3af363a9775b0a6766e0fbcb6e74ac9daea9
SSDEEP
49152:AwsyFA2mdMX/ZWg/T/wpr264kDcYB07+ivD4iOhxT:dsyFAdIXS269DIyO3OzT
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
c33e0f8188f280171361c907770357c4d61e58ca9e94cabdc0bdb7e94a6d5386 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
CreateObject
CreateObjectExt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ