TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
PDFAnnotator.exe
Resource
win10v2004-20231023-en
Target
PDFAnnotator.exe
Size
19.2MB
MD5
99f521ebc90201cc3b404ba596e022aa
SHA1
dfc0b46056ec0720758412f8fddbc7dffd96e546
SHA256
df9bde1bf7692d98a2159e463eea9854a1f0f67833dbb20c9c18dad6f2b4bdc4
SHA512
d96c7148485fbff74216bc3e30f066fca34e8db4320c0766269fd09621fd81ac6187355af5b5e893882fbefec62a8817c4e1ffae812ceac2b4caf75f85e9bec8
SSDEEP
393216:MjiFnhljZ+6JqwgNpb8+vAJmhCtsM8mJx8rz8CH4Ek6i5T2hj+x8Wu:M+BQ6Jqfpb8+vA8gH/8rz3YHh
Checks for missing Authenticode signature.
resource |
---|
PDFAnnotator.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
recv
VerQueryValueW
GetDC
OleUIPasteSpecialW
VariantInit
FreeSid
free
AVISaveVW
WinVerifyTrust
DrawDibOpen
bind
CertGetNameStringA
GdipFree
Pie
ScriptPlace
PlaySoundW
CreateFontPackage
FtpOpenFileA
GetJobA
FindTextW
ImageList_Add
SHGetMalloc
URLDownloadToFileW
PXCV_Init
ImageGetCertificateData
OleDraw
ZwCreateEvent
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE