ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
0efb479bb2f91b6905281363e8cb15f0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0efb479bb2f91b6905281363e8cb15f0.dll
Resource
win10v2004-20231215-en
Target
0efb479bb2f91b6905281363e8cb15f0
Size
10.1MB
MD5
0efb479bb2f91b6905281363e8cb15f0
SHA1
1ee86546452cd659afc3a812d1d1a7a80c9f36ec
SHA256
21d678f9743399350d0ec8996d956c6ce4fe5aff0fd5f3fb087ccb6f15077299
SHA512
5410c069e297a737637b6d893d586eaafbeb14ad62a32ad788e9db2ebe90a30c574322ca9b8ce75f623d3c1e7e5e020ef7c1444ec40f3601b93419bcdeea4ec4
SSDEEP
12288:5ynDeNtn6ITevl9/IVMNP4Iqt6tbczMaMSMWmEEJNz:5ZSITevk+NAnt6BaMdWmE6Nz
Checks for missing Authenticode signature.
resource |
---|
0efb479bb2f91b6905281363e8cb15f0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SysAllocStringLen
GetVersionExW
GetVersion
FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
InitializeSecurityDescriptor
ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ