TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
a8dba8a9c2a5ce5dbd788a3937067d1c6c1acda76c8b3bf6af995b2c0a0a92a7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a8dba8a9c2a5ce5dbd788a3937067d1c6c1acda76c8b3bf6af995b2c0a0a92a7.exe
Resource
win10v2004-20240508-en
Target
a8dba8a9c2a5ce5dbd788a3937067d1c6c1acda76c8b3bf6af995b2c0a0a92a7
Size
7.8MB
MD5
25db1ec1c196b784f8dec1fc3cdbfd0f
SHA1
76600b312a456cf5899565b95555a155e13901e1
SHA256
a8dba8a9c2a5ce5dbd788a3937067d1c6c1acda76c8b3bf6af995b2c0a0a92a7
SHA512
dcc2d166556ea07464167aaebe5402ba2387c78f8b64e959d6b182644758753294acff0b32fecab2c28cd947575bde6d8064e9b86bbe2a2424e9a03fa4a67f56
SSDEEP
196608:e3ILNDUuCcEiZqXAHk7BZWKaMkKtTus2U9+tGz73gf:iILNUurlZq5Z5hNtTx4G
Checks for missing Authenticode signature.
resource |
---|
a8dba8a9c2a5ce5dbd788a3937067d1c6c1acda76c8b3bf6af995b2c0a0a92a7 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
timeGetTime
SHCreateStreamOnFileW
InternetCloseHandle
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
CopyImage
CharUpperBuffW
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gethostbyaddr
GdipFillEllipseI
OleRegEnumVerbs
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ