TMethodImplementationIntercept
__dbk_fcall_wrapper
cmrdRjwAIC
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
2cf0f73c814d2da30fed0254f3e5ef43.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2cf0f73c814d2da30fed0254f3e5ef43.dll
Resource
win10v2004-20231222-en
Target
2cf0f73c814d2da30fed0254f3e5ef43
Size
17.0MB
MD5
2cf0f73c814d2da30fed0254f3e5ef43
SHA1
704dcbbfeeb097a48d1b8f4d082f40c7aa88577f
SHA256
661319852dc06d1c3325fdda1a85a3b03120777b712750b63bb0f1e8a38f0b59
SHA512
84c7ee1ad64da7998fd4a80ba51c4cde589e7eb0e128fcb58209398cacda0d036b8490599e2d8f263ff67995d15a330e7256fe84c4bdf6640a58992e48c3e699
SSDEEP
393216:wtRR6eV3VIfDCN1YVNfjSY1PWm6oOh74+QPTXxAN94:6RoePI5LSY1uiOPAt
Checks for missing Authenticode signature.
resource |
---|
2cf0f73c814d2da30fed0254f3e5ef43 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DocumentPropertiesW
ImageList_GetImageInfo
Shell_NotifyIconW
CopyImage
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
SysFreeString
RegSetValueExW
NetWkstaGetInfo
memcpy
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
IsEqualGUID
Pie
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
cmrdRjwAIC
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ