__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe
Resource
win10v2004-20231215-en
Target
225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe.compressed
Size
160KB
MD5
acce476257bfe9e1316e146018965624
SHA1
92b29e4f7cbd9b156ffe35e05a68444c5a184cb7
SHA256
d11a5a12ebb1f094136c8566f2e8bd7cab4d88e50f08a8b13129e4564c5d66e9
SHA512
a4ef0642b63d7cf1edbbe9e0f153904b20a2e358cc471573f44ea40ea4e2cfb83b6fe5e5cf76ba0388ec17ff01e1d1716946ec528aff3e9f08ec5e52fd868e46
SSDEEP
3072:9FB3O3IRORghwODMJlz1dxoOXwupfN6FivjGdlEeeE6B17Fh8Esp9J5LOUN19:PBZcIDqvysbpf6MjGdNSFnspN19
resource | yara_rule |
---|---|
static1/unpack001/out.upx | INDICATOR_SUSPICIOUS_GENRansomware |
resource | yara_rule |
---|---|
sample | UPX |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe.compressed |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ