TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
dlv1490+22tr.exe
Resource
win7-20220901-es
Behavioral task
behavioral2
Sample
dlv1490+22tr.exe
Resource
win10v2004-20221111-es
Target
dlv1490+22tr.exe
Size
2.9MB
MD5
46b1337377e25bbd12c1081760127422
SHA1
2875901a788af82c1781fcd4145b51998caf38f8
SHA256
06333f90c4401a8dc4da506883be437507595997ac6d4f7d44b15ada33630479
SHA512
80773b5cbc167634c9dac45847ab703692457f19be06dfaccd0af14d791bf5a3beb91303c6ff0cb0939ea9d74e3733544c3458925f9e420334b57875c7f13245
SSDEEP
49152:fFDB5iwmHU5mWtMLuDG0MPIadfaIJvRIJOiVeuQuK6g2iG6eciTwr:fZbiUEWiLuCVZ5kHQuqRG6ti8r
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
PlaySoundW
ClosePrinter
FindTextW
ImageList_Add
ShellExecuteW
GetDC
VerQueryValueW
VariantInit
RegLoadKeyW
memcpy
IsEqualGUID
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE