TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
911dc15ebc0c3c28988e532f21a3bfe1e526642b627dd6d195e2e63d190e644c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
911dc15ebc0c3c28988e532f21a3bfe1e526642b627dd6d195e2e63d190e644c.exe
Resource
win10v2004-20230915-en
Target
911dc15ebc0c3c28988e532f21a3bfe1e526642b627dd6d195e2e63d190e644c
Size
10.2MB
MD5
3e7cd9420054bda6adbe2c1a8f8c3b2d
SHA1
0f528ea1f1ee238a0402ff36997e003eeb7b5691
SHA256
911dc15ebc0c3c28988e532f21a3bfe1e526642b627dd6d195e2e63d190e644c
SHA512
2b6bd5f457ff0e33df110cc5a0c9f33edaaff5726d2af9a30eaca1ca270f412bd600060c91bd56e8058a57409f81c0a32854e738b8a9a50e982b59cba3df7178
SSDEEP
196608:O2+wSPgFYz22C1qwb3bwIvsJCM+N5bxGIw6nHWhc:KwSPA4wbrXvsUM+NtUl6HWy
Checks for missing Authenticode signature.
resource |
---|
911dc15ebc0c3c28988e532f21a3bfe1e526642b627dd6d195e2e63d190e644c |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
GetSaveFileNameW
ImageList_GetImageInfo
htons
ExtractIconW
CopyImage
GetFileVersionInfoSizeW
SafeArrayPutElement
CloseServiceHandle
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
SetFileAttributesW
OleRegEnumVerbs
AddFontMemResourceEx
GetMappedFileNameW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ