TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
8f3be2808b35a699cbb445c1cba2d21699cb93c17423d5d9c0498575d45a656a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8f3be2808b35a699cbb445c1cba2d21699cb93c17423d5d9c0498575d45a656a.exe
Resource
win10v2004-20230703-en
Target
8f3be2808b35a699cbb445c1cba2d21699cb93c17423d5d9c0498575d45a656a
Size
15.3MB
MD5
35bb1b420c14be5fa7a173e9744d19f0
SHA1
cdd666a46325854a1cc4da39828d1ba87c722bc3
SHA256
8f3be2808b35a699cbb445c1cba2d21699cb93c17423d5d9c0498575d45a656a
SHA512
9d7643576a69d1752cf04124eaf1085990bae7cf7d10c009a2b439897c3ebda2dcf31167a4a9ca16feb869df01b4ba7c9c89e92fda2299e5079507d160844350
SSDEEP
196608:GNwn3+1EROkY059U7MkCKg7XRUE/41Jomc4SbxPBRin4is:/sEVY0wOX+bR4D
Checks for missing Authenticode signature.
resource |
---|
8f3be2808b35a699cbb445c1cba2d21699cb93c17423d5d9c0498575d45a656a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE