TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
ae1c9f7402e1a08ae87af4237fae367164fb6da3da2afd7ffb83d22eaa5643e1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ae1c9f7402e1a08ae87af4237fae367164fb6da3da2afd7ffb83d22eaa5643e1.exe
Resource
win10v2004-20230703-en
Target
ae1c9f7402e1a08ae87af4237fae367164fb6da3da2afd7ffb83d22eaa5643e1
Size
648KB
MD5
27b0660713e22639e29e98c8d462adfd
SHA1
efd2975759e446be734508b3548db67d0e5df261
SHA256
ae1c9f7402e1a08ae87af4237fae367164fb6da3da2afd7ffb83d22eaa5643e1
SHA512
7bb4dc8a483d5510f728f1cdfec28322abcbb245060b7c0d39fdafe9e14e5f28dca6d13a041d4ae0b1f05829d887a2fc72fe1fbcde09197012443486e1ed742b
SSDEEP
12288:AjrE5bOYOgNAoLli/c0BmYTzq9cWCWablaQdV:AHE5bygNAalnAmYTc0nACV
Checks for missing Authenticode signature.
resource |
---|
ae1c9f7402e1a08ae87af4237fae367164fb6da3da2afd7ffb83d22eaa5643e1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
GetProcAddress
InitCommonControls
VerQueryValueW
CharNextW
VariantCopy
NetWkstaGetInfo
RegCloseKey
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE