TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Behavioral task
behavioral1
Sample
5cabe27ecb16899c66c118077e9574191d29671c8136a8274addf6fa1cd103c7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5cabe27ecb16899c66c118077e9574191d29671c8136a8274addf6fa1cd103c7.dll
Resource
win10v2004-20240226-en
Target
5cabe27ecb16899c66c118077e9574191d29671c8136a8274addf6fa1cd103c7
Size
944KB
MD5
b811576fe6865e370eec30a97410dfc5
SHA1
e0ce340c76bec16a8b50d075d09dec7daff88a31
SHA256
5cabe27ecb16899c66c118077e9574191d29671c8136a8274addf6fa1cd103c7
SHA512
afcf0ca788e5e43830df36e562eb9f5d2e6693fd089fed9935086a4475c66858f5fdf30560fa48263d10dbf53203006fe771d724c2de56ff8b6861f4752baf4d
SSDEEP
24576:7tE8wsC5inKOYXDUnBwfYb5QvFEIY2ucmzyw26sQ1JNNFAE:7TLs1wos6cc026sQX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cabe27ecb16899c66c118077e9574191d29671c8136a8274addf6fa1cd103c7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE