__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
50cc9a782f3747452d57510732f3f4abdaaca3acf6388f72fefb83aca769c53d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
50cc9a782f3747452d57510732f3f4abdaaca3acf6388f72fefb83aca769c53d.exe
Resource
win10v2004-20230703-en
Target
50cc9a782f3747452d57510732f3f4abdaaca3acf6388f72fefb83aca769c53d
Size
3.8MB
MD5
abbe8947285ed0b6d5255e67ba9573ab
SHA1
b0f734711896cb760316c319f208157e2727e8ab
SHA256
50cc9a782f3747452d57510732f3f4abdaaca3acf6388f72fefb83aca769c53d
SHA512
4fb4350eb47b3ce89c998a574a7dd2c7fad4540e7a4ad456c05b1c3b2a306967f2698e0309b3b4be16f170e6b528221e650ea50928811ae5e2a8e88d110e5b36
SSDEEP
49152:rMiQoChCUpogvHFWYEz1fAcJ0cJQqL/snzz:ry9REz1fApRqIz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
50cc9a782f3747452d57510732f3f4abdaaca3acf6388f72fefb83aca769c53d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE