TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
1b90e140c9feb7aa3cf764e6ee308ebd_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1b90e140c9feb7aa3cf764e6ee308ebd_JC.exe
Resource
win10v2004-20230915-en
Target
1b90e140c9feb7aa3cf764e6ee308ebd_JC.exe
Size
6.7MB
MD5
1b90e140c9feb7aa3cf764e6ee308ebd
SHA1
b3a15c91b672c74555fff0fcd0546b2b870c42ed
SHA256
0438d91cb16b7c60d622fb9e37913fe78b1a25152464d3e93c2ccc09a18cfa42
SHA512
e9072219074510ef0e792991f9faa02c628d5ae73d1c7d69e2c227810f5e2005cbd847228e65bc40470a61adcebf01976f18d336cb82fbad3826d48c2cac3abd
SSDEEP
49152:/xFqGRtp//Pg2+SpGX4SAtFPvApqDR+Jo/w4J1M9eeQ3NLI1GhPYCrjU+Yv:/v5FPvAEDI54CoNkilrYn
Checks for missing Authenticode signature.
resource |
---|
1b90e140c9feb7aa3cf764e6ee308ebd_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ