TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mukax
Behavioral task
behavioral1
Sample
16c075e764d85a40af0c0d9e6def616e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16c075e764d85a40af0c0d9e6def616e.dll
Resource
win10v2004-20231222-en
Target
16c075e764d85a40af0c0d9e6def616e
Size
3.4MB
MD5
16c075e764d85a40af0c0d9e6def616e
SHA1
75cd8addb95725e390e9c246e7814e56f3fccac7
SHA256
60f8c3be5d5c06782205119842cb0e7c1f27aecac1613d7ba9a85c8d99c44887
SHA512
0a7156c4989972a6acd9de59cf574bf982bc102988aa44bf8d2769069ffeb492d993136d558fafaab2a49b04533edc96e295c98e9e5200a1a8e9acd2b6397249
SSDEEP
49152:FlqiEv5SzdQj2LjumSx13JbTeQMmpUf1:d7FLjumSf3JG3mpUf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16c075e764d85a40af0c0d9e6def616e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mukax
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE