TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
General
-
Target
894f2a2edbdb38db837a5ddaf8ee9a179544f979fb9d4bc328af4659c947d1c0
-
Size
26.6MB
-
MD5
7b239dc7c7e02d5d1c2b5e95b494283f
-
SHA1
ceb8fa49752e823ac77ce1acd3408732a0a9d51e
-
SHA256
894f2a2edbdb38db837a5ddaf8ee9a179544f979fb9d4bc328af4659c947d1c0
-
SHA512
205d43a8a7af8c8a8dd74d8c384e536f6947bdf03a02872b1f955595ce544ad7656da4a175d6c9308ab0879d9be74a6378618ed89e7ed42ea4a9c6aa21dc754e
-
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYlitpt6DNcwy:MuttHGxv+ckDNQ
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
894f2a2edbdb38db837a5ddaf8ee9a179544f979fb9d4bc328af4659c947d1c0
Headers
Exports
Sections