TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
winserv.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
winserv.exe
Resource
win10v20201028
Target
winserv
Size
2.7MB
MD5
cf2ab077a46219b6ce4a53517dd489ea
SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess