BindPakFile
FreeFilePak
FreeRes
LoadFilePak
LoadRes
ReleasePakFile
Behavioral task
behavioral1
Sample
0150e208d6d68c607dea88f0a3dfe0ce888f3ab3ff45d484263bf232a23cd409.dll
Resource
win7-20240705-en
Target
0150e208d6d68c607dea88f0a3dfe0ce888f3ab3ff45d484263bf232a23cd409
Size
7.8MB
MD5
42cc84b5a94eeb4df3fb0653625f9e1e
SHA1
af93500822e3fb9b8b52fadd2623c855b4fff2c0
SHA256
0150e208d6d68c607dea88f0a3dfe0ce888f3ab3ff45d484263bf232a23cd409
SHA512
77ea4ae4b0919a27bd09c3a60d081d75fb543d4afc5eac78657cbed5278cdfef2c7e827ca05a8f48d57e584f690f749eae5589f77216daabd9a33e84bb1fc363
SSDEEP
196608:2xrmp/Z9CWLO9mvburEmck6gX0zcmh7Qwft34n:h/ZLDmEmXZkzzVx10
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
0150e208d6d68c607dea88f0a3dfe0ce888f3ab3ff45d484263bf232a23cd409 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BindPakFile
FreeFilePak
FreeRes
LoadFilePak
LoadRes
ReleasePakFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ