TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
5a620263b6624cb72038f97fd293cc24.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a620263b6624cb72038f97fd293cc24.exe
Resource
win10v2004-20231215-en
Target
5a620263b6624cb72038f97fd293cc24
Size
2.5MB
MD5
5a620263b6624cb72038f97fd293cc24
SHA1
f825395b43e4ddab9c4b99d488bea91c3b04c5e9
SHA256
acca2579db5f8bdf5c7d1224ab08649aa2aef6611ab36ca956274515ee3f7468
SHA512
62854d9d04c35a4564a6dcf7dc5d8c08d715b31dca5d4f0d3c9b59355d99eb7cdb19b0066567ac373eebf391a8e48a0d8fc379083a0565e75d29d098fa79fa80
SSDEEP
24576:bjgTgtLW7cLCVjhNNXq7KrLNb5TBexrPgP5ZC8P8FB4SnYmEXYknNgSdnGhCAQqD:LKdniAxEFOSY3IetnGhrHo0Z
Checks for missing Authenticode signature.
resource |
---|
5a620263b6624cb72038f97fd293cc24 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ