TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
ceb35555e36f31727e351c0b68fdbcb11d0d3d75051be0feb69fd97cabbd528e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ceb35555e36f31727e351c0b68fdbcb11d0d3d75051be0feb69fd97cabbd528e.exe
Resource
win10v2004-20231215-en
Target
ceb35555e36f31727e351c0b68fdbcb11d0d3d75051be0feb69fd97cabbd528e.exe
Size
2.0MB
MD5
ecc8fcc87ae95f45f106bf899c3ad98b
SHA1
b9b9772f93b9e72661edca448115c4dcefaeac2d
SHA256
f9cd136d56caa72eddfa9ea6d379db6f0db564541070ce301dfaed625bcbece5
SHA512
95a0f588d2502a052f511a5324dc6421e4fc2c546ae7159d9662c43c277ce32bc9bd320c43083506cfa6877cfed91ac2b3e09235a94db44420a86e436076494d
SSDEEP
24576:/YHsMbgWW+c2AP1KrDCOE1mNCeGCDcQwKbHFTZTDojDaDYE7RIRxs7YaGHAdF:wHn5cCs98xZT97KRxs7Yo
Checks for missing Authenticode signature.
resource |
---|
ceb35555e36f31727e351c0b68fdbcb11d0d3d75051be0feb69fd97cabbd528e.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ