__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
f81ef2dab7e7d59400890ec6d81ee0bce1031272eb8b3436954cf6936ccdd91a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f81ef2dab7e7d59400890ec6d81ee0bce1031272eb8b3436954cf6936ccdd91a.exe
Resource
win10v2004-20240226-en
Target
f81ef2dab7e7d59400890ec6d81ee0bce1031272eb8b3436954cf6936ccdd91a.exe
Size
13.1MB
MD5
d3d7282419c756adde6c7540b1207b34
SHA1
6ea49912c2799652aaf5be2a78d2488d362e6089
SHA256
f81ef2dab7e7d59400890ec6d81ee0bce1031272eb8b3436954cf6936ccdd91a
SHA512
46f297ffc0e5f14c757aa1f1c12cddfb1f427929d66974ac36989b14ad477c2a65c58171d48bde9792a4f461c1d85820b56468ed6e69d6f4473b6f56654f774a
SSDEEP
196608:h+UbwDl8SYrONQUEWCLsrWUc/TRcD8BADuQQdHwkgFLK648mfXX/wg73/fNJ6m6z:haPQ1iiUuT2PQ6LK64fTRJ6HnQB
Checks for missing Authenticode signature.
resource |
---|
f81ef2dab7e7d59400890ec6d81ee0bce1031272eb8b3436954cf6936ccdd91a.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
sndPlaySoundW
LresultFromObject
DocumentPropertiesW
ImageList_GetImageInfo
Shell_NotifyIconW
CopyImage
CharUpperBuffW
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
memcpy
WTSUnRegisterSessionNotification
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
IsEqualGUID
Pie
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ