TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
6627858a34fd34e2e40f3841fbd554076af3758f97801a53ece1316b15a8fe9c.dll
Resource
win10v2004-20231020-en
Target
6627858a34fd34e2e40f3841fbd554076af3758f97801a53ece1316b15a8fe9c
Size
5.2MB
MD5
cfdf819320484faa7ee224b5b88d3c71
SHA1
0b5509b9ac7a019c44beeab1133c782db8817bc7
SHA256
6627858a34fd34e2e40f3841fbd554076af3758f97801a53ece1316b15a8fe9c
SHA512
8a35cd088ee6fda5655fb896b63e8eab380de4b8e736765e008a941ed298b63c124cb8f69799d4535773587a2cabdc15d00ceb491e9af6f968951e248b27fd76
SSDEEP
49152:9h6oTpYdUg8tYvKrdBeSmYtLrXHxkTr+6fTTaydOfrVlOpY8c6R:mhrTK63
Checks for missing Authenticode signature.
resource |
---|
6627858a34fd34e2e40f3841fbd554076af3758f97801a53ece1316b15a8fe9c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ