TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
c20311d5b78dbcf305f634faf81ee887.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c20311d5b78dbcf305f634faf81ee887.exe
Resource
win10v2004-20240226-en
Target
c20311d5b78dbcf305f634faf81ee887
Size
3.5MB
MD5
c20311d5b78dbcf305f634faf81ee887
SHA1
7833e4189f43977479ccbbea48bdedb435b46c31
SHA256
5e838ab18fc86931e3ad962372e8782b4bf2f8a23e4f951c6e665212574a73ea
SHA512
0296b6ba35bcb195cda675d6839135ef009e70ee94836d9b26f1bbdff475e3bbea5783dc6a5238b1ba4de701654a13281dce519b9451d76fc86db9bbb096170c
SSDEEP
24576:P4FAopXNpA+eZP4n96YkJQLKH1lHqMx3nuO0Q+IBdBeSIOdmlvo4MO2bs2yHrG/W:P4W8bTeHNLV7dESIOlOXHi/rZA6CuHc
Checks for missing Authenticode signature.
resource |
---|
c20311d5b78dbcf305f634faf81ee887 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ