TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
d6b4cfbfd3d991f11e43766b540dff6d.exe
Resource
win7-20231129-en
Target
d6b4cfbfd3d991f11e43766b540dff6d
Size
13.5MB
MD5
d6b4cfbfd3d991f11e43766b540dff6d
SHA1
623dc813732aadea3b536d15260a797912e5dab3
SHA256
bb14966525eccfa7abe6efdf09bfdc307a2ffcf0e3022bf956fd7743cd0971c1
SHA512
84fef3ac9e6c1bc42bee582ba3d2f2e4e3e4aaf9d70652490447ca3abce22d84f06058ecca32397fb1c9ea410575a8d7b037bf5137a6400f3f17365b1d6210ed
SSDEEP
393216:5NKlNksD9oXH6jh0mmQhjrb9YOxZJ2GfK4w8ZkX:fKlqsD9g61d7z9YY8GfxSX
Checks for missing Authenticode signature.
resource |
---|
d6b4cfbfd3d991f11e43766b540dff6d |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ