??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
CreateObject
CreateObjectExt
Behavioral task
behavioral1
Sample
be8e8b8a0b4ab5f9c65f80a58f57ee79d0650bb54a99cbb9d8d02fed4f8739ce.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
be8e8b8a0b4ab5f9c65f80a58f57ee79d0650bb54a99cbb9d8d02fed4f8739ce.dll
Resource
win10v2004-20240508-en
Target
be8e8b8a0b4ab5f9c65f80a58f57ee79d0650bb54a99cbb9d8d02fed4f8739ce
Size
2.2MB
MD5
a621cfe0ad2910f7ddc89099cb4abc11
SHA1
f3860c99a3365ee322206c93e77ae0e6e57f88e2
SHA256
be8e8b8a0b4ab5f9c65f80a58f57ee79d0650bb54a99cbb9d8d02fed4f8739ce
SHA512
2cce9c2b28ceafe14cb9ee4085ae1758a23a2774af34d212983b967770f5b6c7375199ec41d5ffb01c5fdce50e5508a67d094e13a2659d58218456dcdabb0747
SSDEEP
49152:mSpUdiSXeMWVRpG+NpO4wcPGaWn7hsqXFNpuOiRxMG6UIM0:mSp0i4p+Lb3wcPGaWSqjpouG6UI
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
be8e8b8a0b4ab5f9c65f80a58f57ee79d0650bb54a99cbb9d8d02fed4f8739ce |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CTimestampUtil@@QAEAAV0@$$QAV0@@Z
??4CTimestampUtil@@QAEAAV0@ABV0@@Z
CreateObject
CreateObjectExt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ