TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
a75e96ed243f0a45b2262b426241d0afadab4cca25635d789d75a2187bdb5a9d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a75e96ed243f0a45b2262b426241d0afadab4cca25635d789d75a2187bdb5a9d.exe
Resource
win10v2004-20231222-en
Target
a75e96ed243f0a45b2262b426241d0afadab4cca25635d789d75a2187bdb5a9d.exe
Size
20.9MB
MD5
157efddc6106a5fd549de3d6e099ee56
SHA1
9605520a2e78595be40695a6233e2a210b2e5bf3
SHA256
1a45145560ab72976cc15166fb67072c929267aa922e96ffae88dcdbfb185323
SHA512
dcbc84e6dd5f8bf231338cef43ec5bdbcb228bb05754bf1a1b2e84957adfa0dd27d095e2ada54cc30b7d4e9382a8a1646a1d143e7a2915916d14379e9fb3e772
SSDEEP
393216:hbU5x1DFudaU5DhSEehVzL0wIK4PfksLAY3NbyopsjUNMSy/:aF9UihuK4P8oANi8rSS
Checks for missing Authenticode signature.
resource |
---|
a75e96ed243f0a45b2262b426241d0afadab4cca25635d789d75a2187bdb5a9d.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ