TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Behavioral task
behavioral1
Sample
64f1a2f9b95a39c04b60062a24a7bc6de038f706cd679df7b1346c34c055e0b1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64f1a2f9b95a39c04b60062a24a7bc6de038f706cd679df7b1346c34c055e0b1.dll
Resource
win10v2004-20240226-en
Target
64f1a2f9b95a39c04b60062a24a7bc6de038f706cd679df7b1346c34c055e0b1
Size
945KB
MD5
3322a0d03e7e901c4a51f83af5878d25
SHA1
b3a5d8e041265e8d46d82bd6114a5a9646680464
SHA256
64f1a2f9b95a39c04b60062a24a7bc6de038f706cd679df7b1346c34c055e0b1
SHA512
7937db609234e3914c2a5c4b35be1540d83a58d627f9706dbbb13baf479ec9e0cf26fd319a1d5cdad1d96e80ba427799c213570941344562ac6a41554a86f6b4
SSDEEP
24576:ztE8wsC5inKOYXDUnBwfYb5QvFEIY2ucmzyw26Ss17sG2EE6:zTLs1wos6cc026SGsG3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64f1a2f9b95a39c04b60062a24a7bc6de038f706cd679df7b1346c34c055e0b1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE