attach
execute
Behavioral task
behavioral1
Sample
VirtualApi.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
VirtualApi.dll
Resource
win10v2004-20240802-en
Target
VirtualApi.dll
Size
4.2MB
MD5
a7cd27d1975d97b0475dca061824b8f1
SHA1
da9e898bc2f034c99494f56b13ab0aec55d64ac3
SHA256
f28fd51c35e8ca4954ebca896560bcab48cb72ae384dad257f036b428329fa01
SHA512
1ca84fdb33eb5d2e941951c2497f8d74b9e8b111ec2bd8ea3a573985c701b69b9b66d84dfff9f9e29548da612faf21eb842aa79ea227716a9a200f60564b2c90
SSDEEP
98304:0bJ4+rcWagkzD483Q92TFc0UkAS58z8ZVYJ:0bfw9gs48oD0aSuwZSJ
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
VirtualApi.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
attach
execute
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ