TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
388ee79d256270e2281f14392c4817d9125b5acb603dc98f7319eabe9d18d94b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
388ee79d256270e2281f14392c4817d9125b5acb603dc98f7319eabe9d18d94b.exe
Resource
win10v2004-20240412-en
Target
388ee79d256270e2281f14392c4817d9125b5acb603dc98f7319eabe9d18d94b
Size
9.4MB
MD5
1ef078b4373eeca52f7e74ad5deb37af
SHA1
0a3e11735e208d1d2453bc7f0baf85fb6aae2de6
SHA256
388ee79d256270e2281f14392c4817d9125b5acb603dc98f7319eabe9d18d94b
SHA512
eb1bbe74dad3a6015cac22e65650f0514e3e6edfe7138bef1f81d711442e60fcfdb87c50ca0afbb5c50ce155066a1ba74485177dc3f5065f2f1bbd8fdf52c567
SSDEEP
98304:QWdfAaRL3mYlY7HjSxAdxJ2iQMvH+CjbhemLqMdv4l7/iOXfliezJkK7/iHXfli3:zL3mfSGnkBOlempcXftmXf6f
Checks for missing Authenticode signature.
resource |
---|
388ee79d256270e2281f14392c4817d9125b5acb603dc98f7319eabe9d18d94b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
GetProcAddress
timeGetTime
Direct3DCreate9
GetPrinterW
PrintDlgW
ImageList_Add
ShellExecuteW
GetDC
VerQueryValueW
VariantInit
RegEnumKeyW
NetWkstaGetInfo
memcmp
SHGetFolderPathW
OleDraw
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE