TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
ad8e2616b611034a961baa876e9cf00a386017f9613eb40b7c125544e7be93ec.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ad8e2616b611034a961baa876e9cf00a386017f9613eb40b7c125544e7be93ec.exe
Resource
win10v2004-20231023-en
Target
ad8e2616b611034a961baa876e9cf00a386017f9613eb40b7c125544e7be93ec
Size
10.7MB
MD5
16cbf58e2f38fefe95e036a451433768
SHA1
8e8871a38c1e068f9febce159ca04a4e49a58d83
SHA256
ad8e2616b611034a961baa876e9cf00a386017f9613eb40b7c125544e7be93ec
SHA512
5dc96acb4f739472828ea9dc0ed36561980444b827c3f0d364f05de0506f6550200d246889ba18155cd5303ff1119fcc9ee2e16cf6de503ff85ccf0ecbf2ffe7
SSDEEP
98304:3ZKzVyDUbVSpQv7I/par8CPnyiP5XpLQiOFNBAkpo:3ZzqV4Qvo67PyWjLQiOyMo
resource | yara_rule |
---|---|
sample | miner_phoenix |
Checks for missing Authenticode signature.
resource |
---|
ad8e2616b611034a961baa876e9cf00a386017f9613eb40b7c125544e7be93ec |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SetupDiGetClassDevsA
DocumentPropertiesW
ImageList_GetImageInfo
SHBrowseForFolderW
CopyImage
GetFileVersionInfoSizeW
SysFreeString
CloseServiceHandle
NetWkstaGetInfo
memcpy
SetFileAttributesW
SHGetFolderPathW
htonl
IsEqualGUID
Pie
NtQuerySystemInformation
GetInterfaceInfo
GetMappedFileNameW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ