TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
c9b9f2e8cca7ea0e75df1afc1d17da944ee5d3d82a7e572bdeb3deeef5ea781f.exe
Resource
win7-20240508-en
Target
c9b9f2e8cca7ea0e75df1afc1d17da944ee5d3d82a7e572bdeb3deeef5ea781f
Size
7.1MB
MD5
50dfb68ee48a90913c6b75b555a3c21a
SHA1
154b84633c958278ef4fcb567630a5ee5488294b
SHA256
c9b9f2e8cca7ea0e75df1afc1d17da944ee5d3d82a7e572bdeb3deeef5ea781f
SHA512
dd86f41758486362c20726b9003b928b62fb61bfcb207e2bcf847c9017e0bcc1a4be33b8e624815e3be00bd8ce45f9a7b0650083e575534a2613eb3fee19a45d
SSDEEP
196608:tmQZ322slewMHZJP6BC0GFC5DpKuCpCW:X2vAwMJ30ksDpapCW
Checks for missing Authenticode signature.
resource |
---|
c9b9f2e8cca7ea0e75df1afc1d17da944ee5d3d82a7e572bdeb3deeef5ea781f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE