_1
_AtExit64
_Initialize64
Behavioral task
behavioral1
Sample
bb26ec3c4c49d28349ece8cf72dca462834814ee1ff275f39b9b4879715ef21a.dll
Resource
win7-20241023-en
Target
bb26ec3c4c49d28349ece8cf72dca462834814ee1ff275f39b9b4879715ef21a.exe
Size
2.2MB
MD5
c62ff694109fc1f6edbed7c8b889ad83
SHA1
1484f000acfc98c20a69820be8320f61913df107
SHA256
bb26ec3c4c49d28349ece8cf72dca462834814ee1ff275f39b9b4879715ef21a
SHA512
89c8e1995d4df0c029154c172a0ec0d07d7aa979b47335bd6525c60d538c8277078587ad40c484349cb1b43a4749648774ebc239b2fc2e84602d5f5a6b3dc8c7
SSDEEP
49152:yu6fyGdUHVagG/5Jxbopjo6kjtjLFE2SawLHczUo3JFJ4EG7b7W:yrZW1ahfx7jZE2/xfJ4EUW
Processes:
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
Processes:
resource |
---|
bb26ec3c4c49d28349ece8cf72dca462834814ee1ff275f39b9b4879715ef21a.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_1
_AtExit64
_Initialize64
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ