TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
80342e0955bdd7_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
80342e0955bdd7_JC.exe
Resource
win10v2004-20230703-en
Target
80342e0955bdd7_JC.exe
Size
26.6MB
MD5
80342e0955bdd74bb8ac16cba344c9ec
SHA1
9d8277a7f489823eb1ee11f265ee9cbf891c8971
SHA256
d3336daf77cf93da0f4467883b58208bfb3f28136680d9b042a52c6e2eb8f896
SHA512
53821017e122de91e823434e3cd7c394f9959c82df6024a6b389483536ef1d2bdc5ca7db65d96b18bd24810ce0639cd9f836ca85a6b3d2ac0a29840976973e4a
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYlSspt6DNcwy:MuttHGxv+cXDNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
80342e0955bdd7_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE