TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
c2967888779e78de8c5edacd4ba64c9e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2967888779e78de8c5edacd4ba64c9e.exe
Resource
win10v2004-20240226-en
Target
c2967888779e78de8c5edacd4ba64c9e
Size
6.4MB
MD5
c2967888779e78de8c5edacd4ba64c9e
SHA1
c37cc81ae2e68b6c94df46df11d82aadec672471
SHA256
1c470b1d3149c8afdb928dc368babf3e79b5c78a8ba2b5b03f7ebfb20c37d2c8
SHA512
13420e5f7629bfffec0b54097ad6659d16a2021663758d4f8da95c8c78a059723239d5c91364ebf0f60a2bec6a5d6de4bddd2ed6a7383656bc7bb827f838acc9
SSDEEP
196608:Opa4efSWALB8Qn3rXE37Ne7FnHMx7h8mAfyq/h7V:HXHAd3A37Y7FnHMh8Kq/h7
Checks for missing Authenticode signature.
resource |
---|
c2967888779e78de8c5edacd4ba64c9e |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
InternetCloseHandle
DocumentPropertiesW
ImageList_GetImageInfo
Shell_NotifyIconW
CopyImage
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
SafeArrayPutElement
CloseServiceHandle
NetWkstaGetInfo
isupper
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
gethostbyaddr
IsEqualGUID
Pie
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ