TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Behavioral task
behavioral1
Sample
1b3740d9a8511ddfdb657cd796c7bd0adb49bf8f63490df0248ff07d19cd4294.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b3740d9a8511ddfdb657cd796c7bd0adb49bf8f63490df0248ff07d19cd4294.dll
Resource
win10v2004-20240226-en
Target
1b3740d9a8511ddfdb657cd796c7bd0adb49bf8f63490df0248ff07d19cd4294
Size
743KB
MD5
46c6f51f674a8cb6aec4a9462692d156
SHA1
a2c3c11b9f68aaddc48489ad9abba7fbd8f28787
SHA256
1b3740d9a8511ddfdb657cd796c7bd0adb49bf8f63490df0248ff07d19cd4294
SHA512
7166f88be0f2a36ba26bd86dec87ad03d6f03440276ab02d22afdec348424640f132aded71a912f595a08c5ead27a60b30a7388fc4d1d9ae0e0b95fdf37f791b
SSDEEP
12288:pK/B5QF5BV3wW9uD/mhCQFhvLulYMoGoPMP7ki0h8s/m5sfDYMnX0dUi9KU:YB5QzB2W9xhzulYMoGoU7Js7DbnX0dt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b3740d9a8511ddfdb657cd796c7bd0adb49bf8f63490df0248ff07d19cd4294 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ