func1
toeditbox
toeditboxreplace
Behavioral task
behavioral1
Sample
2a5c9cfd7481eb4b9ed9d3e60c7736918d3850858fca442685ad21f9270198fe.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2a5c9cfd7481eb4b9ed9d3e60c7736918d3850858fca442685ad21f9270198fe.dll
Resource
win10v2004-20240508-en
Target
2a5c9cfd7481eb4b9ed9d3e60c7736918d3850858fca442685ad21f9270198fe
Size
3.7MB
MD5
0e3284ad19d64eb95d6972777ef0f97c
SHA1
da313c78a1a35f48a2a8a6f0661f304f8bbae95a
SHA256
2a5c9cfd7481eb4b9ed9d3e60c7736918d3850858fca442685ad21f9270198fe
SHA512
750f6dfb46140a174c5081f1f58fb8e775f73d65b48eea9dd263b821e2a79fbf0bec3c7a8576d734ed5e34a0b7bca05a3c53c11592dde1e24896c071b0a5f555
SSDEEP
98304:Ix8A6KRC90e+7KNopBDZc55KfOGe1NghYjOqUVtJP6CrS:IxSKQ90bmNEZc58mGgC+Oq+6CrS
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2a5c9cfd7481eb4b9ed9d3e60c7736918d3850858fca442685ad21f9270198fe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
func1
toeditbox
toeditboxreplace
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ