TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
aad6190abae4d09d7c6433bbba66dfb953433401da7c40321f307445df943d13.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
aad6190abae4d09d7c6433bbba66dfb953433401da7c40321f307445df943d13.exe
Resource
win10v2004-20231130-en
Target
aad6190abae4d09d7c6433bbba66dfb953433401da7c40321f307445df943d13
Size
9.2MB
MD5
0569ca52dbdb3e2ac7a3e4652583b7d2
SHA1
bea65826cabe45d850be7fdae231ec8ea74d28a1
SHA256
aad6190abae4d09d7c6433bbba66dfb953433401da7c40321f307445df943d13
SHA512
7f2dd3524c2476eb16bf813db32458773eceabeccc044c7e82a6e6762c890705cb02fe420ea83660b233e1200389f870464149267689df876c391ea06418dad8
SSDEEP
196608:A0twfR4N/mXnfltGSE1Dl4DcGAiAfBn/sX/zJTMwA/9UE7orWcDF1Im:I6/mXfCJDEAiuEX/dTMwAlOrZDFym
Checks for missing Authenticode signature.
resource |
---|
aad6190abae4d09d7c6433bbba66dfb953433401da7c40321f307445df943d13 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
timeGetTime
clinkStart
SHCreateStreamOnFileW
InternetCloseHandle
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
CopyImage
CharUpperBuffW
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gethostbyaddr
GdipFillEllipseI
OleRegEnumVerbs
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ