TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
e0a53d282d3173d9f01e50002389ee77.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0a53d282d3173d9f01e50002389ee77.exe
Resource
win10v2004-20240226-en
Target
e0a53d282d3173d9f01e50002389ee77
Size
2.5MB
MD5
e0a53d282d3173d9f01e50002389ee77
SHA1
9156bb9b9da91fc2548e214a9361075911ed928e
SHA256
8cd6299a52a066358fa81e92d3e39477d4b8268693f2f7db5aed50bf993ac58d
SHA512
b3b1666f3e6158e644a50cfe457587460216e5671f68e6c8797cd9fed1dfec9ff928f5b91778bb9e0bd242cd8645598125a46b8f92226c3c0e717e3b35c4d079
SSDEEP
24576:XjgTgtLW7cLCVjhNNXq7KrLNb5TBexrPgP5ZC8P8FB4SnYmEXYknNgSdnGhCAQq1:HKdniAxEFOSY3IetnGhrHo0Pbv
Checks for missing Authenticode signature.
resource |
---|
e0a53d282d3173d9f01e50002389ee77 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ