ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
b95f950f49bcdafea93b305ca1e7f041.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b95f950f49bcdafea93b305ca1e7f041.dll
Resource
win10v2004-20240226-en
Target
b95f950f49bcdafea93b305ca1e7f041
Size
10.1MB
MD5
b95f950f49bcdafea93b305ca1e7f041
SHA1
f9d601fa7dc038f18d8f5ba972672bf045eeee57
SHA256
18c9e7a75f94f0fe66c634b7aa72e4e8b6b67dc0fba0c1a1f9f8e1996d35a27f
SHA512
1f813b7538bc8299306b17f7a3efe63170600ddade6cb77ce2a1a952fb170be6f3dfd7773affb6801be3283c6433411813b7c752ae90895b76da189944992ad9
SSDEEP
12288:5ynDeNtn6ITevl9/IVMNP4Iqt6tbczMaMSMWmEEJNyY:5ZSITevk+NAnt6BaMdWmE6NZ
Checks for missing Authenticode signature.
resource |
---|
b95f950f49bcdafea93b305ca1e7f041 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SysAllocStringLen
GetVersionExW
GetVersion
FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
InitializeSecurityDescriptor
ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ