TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
JC_30344e092af12c089034ade2f8305745a7ff2b104ca6ec010a5b99473cc60555.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JC_30344e092af12c089034ade2f8305745a7ff2b104ca6ec010a5b99473cc60555.exe
Resource
win10v2004-20230831-en
Target
JC_30344e092af12c089034ade2f8305745a7ff2b104ca6ec010a5b99473cc60555
Size
12.2MB
MD5
9594fdb284a6fff5875d8c8260114e48
SHA1
e8587fc1b018fbb3014e4d9d044af97234fff2d6
SHA256
30344e092af12c089034ade2f8305745a7ff2b104ca6ec010a5b99473cc60555
SHA512
154f2806d44237c9d86d1caa7beb833509ac3957f7bee21a6526d5bb260c7865f9eaa4475a6eccc7cbb5859c574c5a45d35c55e7b51bac958a51942f7b7c82df
SSDEEP
98304:ddkKz6RCUJ3Spw7I/par8CPN6YTLeY5CnJ+Jn21z0S:ddk7h34wo67PNL4+c
resource | yara_rule |
---|---|
sample | miner_phoenix |
Checks for missing Authenticode signature.
resource |
---|
JC_30344e092af12c089034ade2f8305745a7ff2b104ca6ec010a5b99473cc60555 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SetupDiGetClassDevsA
DocumentPropertiesW
ImageList_GetImageInfo
SHBrowseForFolderW
CopyImage
GetFileVersionInfoSizeW
SysFreeString
CloseServiceHandle
NetWkstaGetInfo
memcpy
SetFileAttributesW
SHGetFolderPathW
htonl
IsEqualGUID
Pie
NtQuerySystemInformation
GetInterfaceInfo
GetMappedFileNameW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ