TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
d879f46f48bfc93194026de14644e6534c07c66295984a30fb51be8634ab5d20.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d879f46f48bfc93194026de14644e6534c07c66295984a30fb51be8634ab5d20.exe
Resource
win10v2004-20240226-en
Target
d879f46f48bfc93194026de14644e6534c07c66295984a30fb51be8634ab5d20
Size
4.8MB
MD5
5aaaf934e435762604ee4293da24a8ad
SHA1
2b689a5a8a877261ff8bd2a5cb2edf511122094b
SHA256
d879f46f48bfc93194026de14644e6534c07c66295984a30fb51be8634ab5d20
SHA512
d75327876ed717d6155310585a05019d35f24ccf1f235b0cf1d393b1d489152283014272ae0c5ca936951e55e1c94a390baa05db9aa117b0c4b1bce276c139d7
SSDEEP
98304:Tfekz67sIcKxF04eLqCDdviDtvA5CtZQBPFJmgmD8DRbpYYPVjO/o:T/uwIcKf0RysCtZQdFs2pJp
Checks for missing Authenticode signature.
resource |
---|
d879f46f48bfc93194026de14644e6534c07c66295984a30fb51be8634ab5d20 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
waveOutOpen
DocumentPropertiesW
GetOpenFileNameW
ImageList_GetImageInfo
Shell_NotifyIconW
MoveWindow
GetFileVersionInfoSizeW
SysFreeString
RegSetValueExW
memcpy
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
SHGetFolderPathW
IsEqualGUID
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ