AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
708f9ef8d98ded053fd2ccc1df6a243d87e36ed78913616339c30bef8a0d8f3c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
708f9ef8d98ded053fd2ccc1df6a243d87e36ed78913616339c30bef8a0d8f3c.exe
Resource
win10v2004-20240709-en
Target
708f9ef8d98ded053fd2ccc1df6a243d87e36ed78913616339c30bef8a0d8f3c
Size
5.8MB
MD5
7035ce54aac9370f946640e8ae5f76cc
SHA1
4abe2e2a6b038973736e5373eb2055b08726fb2b
SHA256
708f9ef8d98ded053fd2ccc1df6a243d87e36ed78913616339c30bef8a0d8f3c
SHA512
b19e27b5686cd272e70c58c04a4727e4aed1d24996f2094e19c6345d4352afd9117db3bc136e525f015551ee2a4607acc98f4c125706ac4b9b6d94bf91fc5a65
SSDEEP
98304:JqRcYbBmc41WDvnwkyD6L8tdjXZuPagv2EuUInnbmJdZcHwTp060yF:JqRtBmc41mfwB7gv2yInbmJdZcEi6R
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
708f9ef8d98ded053fd2ccc1df6a243d87e36ed78913616339c30bef8a0d8f3c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
UnityMain
TerminateProcess
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ