TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Static task
static1
Behavioral task
behavioral1
Sample
d8ebd1d13056d7ae44d84ddcf7df37b79940a89918aa7871f36241de65c624ad.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d8ebd1d13056d7ae44d84ddcf7df37b79940a89918aa7871f36241de65c624ad.dll
Resource
win10v2004-20240226-en
Target
d8ebd1d13056d7ae44d84ddcf7df37b79940a89918aa7871f36241de65c624ad
Size
3.2MB
MD5
38fcc0e47788f0dea7e207d0364e4407
SHA1
0d4c13fe738ab4094b985e9383414d594f784432
SHA256
d8ebd1d13056d7ae44d84ddcf7df37b79940a89918aa7871f36241de65c624ad
SHA512
c82e6f864abd2edc67b408f27a92305db91b493d48bb41146df89abbb14e314add14019f58b263ce50c94e2a056670c5e2d1a383490a000641fb1b8c56793e01
SSDEEP
24576:AKhQ+QkcqmoXBPwJTahIkTWWnjUCjxm4ByiIgT64x/QRczU:phmHhaPiTNk6WnjUCjxTkizT64x/QP
Checks for missing Authenticode signature.
resource |
---|
d8ebd1d13056d7ae44d84ddcf7df37b79940a89918aa7871f36241de65c624ad |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ