TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Static task
static1
Behavioral task
behavioral1
Sample
a1219acec7d8b85c7b4626536074eeff8db803b50f60e6f87eaa4289b9e4d326.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a1219acec7d8b85c7b4626536074eeff8db803b50f60e6f87eaa4289b9e4d326.dll
Resource
win10v2004-20231215-en
Target
a1219acec7d8b85c7b4626536074eeff8db803b50f60e6f87eaa4289b9e4d326
Size
3.2MB
MD5
ed951ab1676725ac41a1f2bf99511e4a
SHA1
9cf34c858d03ef95568be00782fb7b32874a0df0
SHA256
a1219acec7d8b85c7b4626536074eeff8db803b50f60e6f87eaa4289b9e4d326
SHA512
1c22eb0d648aa191b4c5f7e744ff74d4d1e5771be007f073d35ff53999aa1c786b14c4af5a735286789e38e9a5d5ef2bdc79678d00297cab45a8a923a81ae85e
SSDEEP
24576:gKhQ+QkcqmoXBPwJTahIkTWWnjUCjxdRoyiIgTxY2/QRczK:JhmHhaPiTNk6WnjUCjxXPizTxY2/QN
Checks for missing Authenticode signature.
resource |
---|
a1219acec7d8b85c7b4626536074eeff8db803b50f60e6f87eaa4289b9e4d326 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ