TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
3a82f2b83dac2282b365a259eea37d6ec4c990587c87022834b1187d9d35e93d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3a82f2b83dac2282b365a259eea37d6ec4c990587c87022834b1187d9d35e93d.exe
Resource
win10v2004-20231020-en
Target
3a82f2b83dac2282b365a259eea37d6ec4c990587c87022834b1187d9d35e93d
Size
1.6MB
MD5
c22f4218fc577578ebda70c1146fe795
SHA1
cbfc0edd4f33d69c81a453a862c479650da150fe
SHA256
3a82f2b83dac2282b365a259eea37d6ec4c990587c87022834b1187d9d35e93d
SHA512
80c47a672dd65792dab56f8e5644fe5eb7081393d7671546273437ee1d609df3652b2be5f0febfa2a90467d3b9cac5b73be0aa49effae38fd52fe5d4a6413d70
SSDEEP
12288:4YqtfC7mS46o1X+CtXsU0/RBRZrVGRYX/kTEochr9VOAAH:4k7SpX+CtcUaRBdvkTEoMrCAAH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a82f2b83dac2282b365a259eea37d6ec4c990587c87022834b1187d9d35e93d |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE