TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
9f7f89c60a3f58bf019f3a33dd520afb7dc496553e8baec3347b678239a9f2e8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9f7f89c60a3f58bf019f3a33dd520afb7dc496553e8baec3347b678239a9f2e8.exe
Resource
win10v2004-20240226-en
Target
9f7f89c60a3f58bf019f3a33dd520afb7dc496553e8baec3347b678239a9f2e8
Size
4.6MB
MD5
906fd1a51cba27ab554906efaae0521e
SHA1
441a7ff7320ccee3a5ce6ad4ad0a5cf4e717d56d
SHA256
9f7f89c60a3f58bf019f3a33dd520afb7dc496553e8baec3347b678239a9f2e8
SHA512
8903bc17117bcc5bde92f0531a82f1d62b69331eede2ae8e2bcd8a5a6f500b2d733416a24742d602ef901786ba8ee3e8db9831e571a036a560116e987c757bdd
SSDEEP
49152:v4K7zEsULwkRF0uhiSag9ysZC2DGEbJsS/5hFSR0qtD7NttTyq:v4K7zJKwkXSEJss9q9h7yq
Checks for missing Authenticode signature.
resource |
---|
9f7f89c60a3f58bf019f3a33dd520afb7dc496553e8baec3347b678239a9f2e8 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ