AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Behavioral task
behavioral1
Sample
2663c826a717771218b99d580abd1674128a6b6b0d424ad317ac7f60f035c2de.exe
Resource
win7-20240704-en
Target
2663c826a717771218b99d580abd1674128a6b6b0d424ad317ac7f60f035c2de
Size
13.3MB
MD5
67c476fde936304a71ebe40fc33668a5
SHA1
79df483dc39939e6e2808c56ca7452c6b6f87a29
SHA256
2663c826a717771218b99d580abd1674128a6b6b0d424ad317ac7f60f035c2de
SHA512
c34a27c22168e0e9e33450628234fd583b43b66dbb494f7101b29dc98fcdf290040bb7a6d9a10a298000e315d2caa3e47b1cb01650db4352c086bafb98242b21
SSDEEP
196608:8Gh0YP8f58j0ShuDQoIGk9i43kHMMBSFOPMj54hvQBll2anEmKZ:4YP8f58XuDQoIGk9iWkHMcs4hehEvZ
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2663c826a717771218b99d580abd1674128a6b6b0d424ad317ac7f60f035c2de |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE