ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
1334213f864da35b8a4e077c53617646.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1334213f864da35b8a4e077c53617646.dll
Resource
win10v2004-20231215-en
Target
1334213f864da35b8a4e077c53617646
Size
10.1MB
MD5
1334213f864da35b8a4e077c53617646
SHA1
8cb3bc7b7d12e8b06534379b005a53e1b1458b2d
SHA256
019928c9e2ab222ef22ea295fefec0f6edac7790a866b07f5cc9e819dd0f2bf9
SHA512
88bda15c5fa229d044bb8ed7a8a9cc01e2be76540f6590045a58437e237ad01dce4b8315fc0b044c7113c43c815145c928ae639092504b3bdb64c8e72ba5f82c
SSDEEP
12288:5ynDeNtn6ITevl9/IVMNP4Iqt6tbczMaMSMWmEEJNb:5ZSITevk+NAnt6BaMdWmE6Nb
Checks for missing Authenticode signature.
resource |
---|
1334213f864da35b8a4e077c53617646 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SysAllocStringLen
GetVersionExW
GetVersion
FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
InitializeSecurityDescriptor
ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ