TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
悟空神辅II 2.4.0.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
悟空神辅II 2.4.0.0.exe
Resource
win10v2004-20240508-en
Target
悟空神辅II 2.4.0.0.exe
Size
10.3MB
MD5
d32a28a420ee65a88d1d9fdbd34d64aa
SHA1
84201ebdc740c085a3cf023ff06004f5a4c10839
SHA256
8d39f97fd14396ba20537cea8e5d9b899170320b120830352ea3131f964e587c
SHA512
1ae613e10ea3ed80d08355a0e4e5c07d8d1d2daf4866ff8c40cd450eae9997b07f9143f7fa3c4a22dd3753e7919f832337b5f4f466fbf713aa8a742b52fcbf17
SSDEEP
196608:6x/hdrWOOJAoWj6EpJSX0Iz9lHOueyLtVUnpbCw2puEIdwSZwR:6x/hdnO6HriplHOuDxVUpGYTLZwR
Checks for missing Authenticode signature.
resource |
---|
悟空神辅II 2.4.0.0.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
GetSaveFileNameW
ImageList_GetImageInfo
htons
ExtractIconW
CopyImage
GetFileVersionInfoSizeW
SafeArrayPutElement
CloseServiceHandle
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
SetFileAttributesW
OleRegEnumVerbs
AddFontMemResourceEx
GetMappedFileNameW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ