TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
1f385ac1c16dd7c77addac6e70d1b52a.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1f385ac1c16dd7c77addac6e70d1b52a.exe
Resource
win10v2004-20231201-en
Target
1f385ac1c16dd7c77addac6e70d1b52a
Size
20.8MB
MD5
1f385ac1c16dd7c77addac6e70d1b52a
SHA1
2bd8c36ae3b3813876f7aeec2b09fc7c54c6b7ce
SHA256
fddbc18a01dc975260aa5c5b4b45b5baf9e9bd0539eefa8a4a90469f07e9cc4c
SHA512
c2df685ea4f57b12ede3c5dd29c9aef7f48bc88483eff9c86f7a14367e969d998c2e0fc11c4d5fe02b1980738e1561428b6be390c8c2714aa421f3fab7164586
SSDEEP
393216:nKFeSIKpfjGl7qLUnjN6DEjexRa3OPGZYPh9Oa07FuKk0pNKoEYe:KFbxg7qLw6QuA3OuZYC1jpNKoEYe
Checks for missing Authenticode signature.
resource |
---|
1f385ac1c16dd7c77addac6e70d1b52a |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ