TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
General
-
Target
-
Size
566KB
-
MD5
c4aab3b24b159148d6d47a9e5897e593
-
SHA1
7061c2e85de9f3fd51cccdecb8965f1e710d1fe5
-
SHA256
03a4d3563a7519542c662b5fd5d61215f3d76a3902717efe11230292ea4bbafc
-
SHA512
9bc522ff0d598a1f1425a09a2794584c4991a99bc382b0ee9135311950cdbf2f5331ae041a4b01052735b5fae3a2763ea1b5c01ce679b07fba73c6f75cb4c252
-
SSDEEP
12288:hB9DVvI0AQzeeoKUNtbP1eFqiFOQiL3XwUJlSbzgSm/ZDG:D9ZvHhzeeZCtb9eFqiFninlSfmBC
Score
10/10
Malware Config
Signatures
-
Detects executables built or packed with MPress PE compressor 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9f9da03f359e04c9ef7a636c5fa7b6db
Headers
Imports
Exports
Sections