TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
a9a4c3e4188fd0c6c1c9190edcc6261f9646d72160ab92a973f72f6565571933.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
a9a4c3e4188fd0c6c1c9190edcc6261f9646d72160ab92a973f72f6565571933.exe
Resource
win10v2004-20230621-en
Target
8517233f5a806a16aae2269118209f0e.bin
Size
4.5MB
MD5
223abaeca9f580ceea4a3cc4518b82e3
SHA1
3ed6c79d362ca84f01ce6b20b58bba95231eb54a
SHA256
c406906c78464dc0c0fef5bc1d25fbfb06772ded71b49e9dff729936889b4e26
SHA512
90e45a3f97bd2f2c74a2e1c01d79f6249ff3dadba5a9c18acccacfdd411bf5c281b7a57129cb75e8bbd073d37d9706a1a2e479057f37e3372ce5ef86c0a4189f
SSDEEP
98304:o+06A9WzMA94PN8jITsQmH3mLxcIxL01dy8Qm3FmZAx6NlOVWp:o+0FN/M2lcIV01gg4Kx6NlOo
resource | yara_rule |
---|---|
static1/unpack001/a9a4c3e4188fd0c6c1c9190edcc6261f9646d72160ab92a973f72f6565571933.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/a9a4c3e4188fd0c6c1c9190edcc6261f9646d72160ab92a973f72f6565571933.exe |
unpack002/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ