TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
9aa015a70c717742302931754b245df688db136eefcaf78999f3b451582b8f31.exe
Resource
win7-20231215-en
Target
9aa015a70c717742302931754b245df688db136eefcaf78999f3b451582b8f31.exe
Size
13.3MB
MD5
4e26096a34afffecb32b07601864b82e
SHA1
02714064cc9eb1eb1742aa593ae1b635301fa97c
SHA256
f38266173aa0d33e5c3a943f424317e209089546dd08e3f824e7d02ba754e029
SHA512
b7d92153a02c6db70e3a12231b4630b5157fc8e7442a240ffa3a3a0e308dbf4d44f091d998a7241a97f79d9431bb90fe29c0b0110593889c9df8d2559048363a
SSDEEP
393216:9NKP8cSEi66DI6sWwfGQMAn+o2Upzw6eO4IE:zKAMWwUA+jUpz7eO4x
Checks for missing Authenticode signature.
resource |
---|
9aa015a70c717742302931754b245df688db136eefcaf78999f3b451582b8f31.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ