AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
14288a015eb48aaec74aaccd4c4d87702c054bcd3bf97a324ffcf8254649373b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
14288a015eb48aaec74aaccd4c4d87702c054bcd3bf97a324ffcf8254649373b.exe
Resource
win10v2004-20240802-en
Target
14288a015eb48aaec74aaccd4c4d87702c054bcd3bf97a324ffcf8254649373b
Size
3.1MB
MD5
d7153369fb618b71c7865ca726f83e52
SHA1
08077ab159d41030c25a8ae2c19234eb5aa96313
SHA256
14288a015eb48aaec74aaccd4c4d87702c054bcd3bf97a324ffcf8254649373b
SHA512
a154cad740f97706e57ff5ade8f2765e8281f03420f22359cb05fd6c35274bdff8b21df252104a686fec1f3f4688564b603c7e97efb2748a404759cac7989553
SSDEEP
98304:ZThQmC5Bz5CLcBFqGI1yi/UQeZndszkAVfQEyFg0FBL+c35QgPJD3hMa8HIRiy:Vs+6uCJ3hMa8HHy
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
14288a015eb48aaec74aaccd4c4d87702c054bcd3bf97a324ffcf8254649373b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ