TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
e92ea587253dde2d7d60f261b14019019cd9de5050cfb681a23c7deb813709a9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e92ea587253dde2d7d60f261b14019019cd9de5050cfb681a23c7deb813709a9.exe
Resource
win10v2004-20230703-en
Target
e92ea587253dde2d7d60f261b14019019cd9de5050cfb681a23c7deb813709a9
Size
11.4MB
MD5
134a56a6767c062f4b4b1ab40d739ef0
SHA1
b336441693cf9c973972499d805950a749493aad
SHA256
e92ea587253dde2d7d60f261b14019019cd9de5050cfb681a23c7deb813709a9
SHA512
10bea0bd8649765966a21e1a5610e9140a9c41c18030ec18c0148b2ce4ebfb9ea2ad38fa95e224e67d711858e3058af4141fe8ff997c69e0567d85de85de9e81
SSDEEP
196608:vI8MRJdm885ko5CLjUXtWOmASppxD8tiGn4EYiRugv5NbRd/BDa7:vI3Jdm882T3wfmpFYtidEYisg/LZI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e92ea587253dde2d7d60f261b14019019cd9de5050cfb681a23c7deb813709a9 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE