TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
a7104b687a78df51b229d58abe7692facca0db14ddb79a524f114417ab49b444.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a7104b687a78df51b229d58abe7692facca0db14ddb79a524f114417ab49b444.exe
Resource
win10v2004-20240508-en
Target
a7104b687a78df51b229d58abe7692facca0db14ddb79a524f114417ab49b444
Size
7.1MB
MD5
dac4bf36c9fc72a6f161cbc8e1e2917f
SHA1
ff6d5cccd5c66be6303780567fdda2c54354fb49
SHA256
a7104b687a78df51b229d58abe7692facca0db14ddb79a524f114417ab49b444
SHA512
66deb81c6836641a1ab3578db041cf4b191822577dd3a795fcf25de0d466f69d00cc5c1ec63ae46a4c88d96b95a4e5c9fdbd5f6332e200eacafca34188d2fc66
SSDEEP
98304:M/7t0ol2SuFGbOp1S7sjXqnmHB9cmALG35C+zIS7Vf7bn+Ge6GY6OTmGGG:KKpM7sjX3H83LeYXYP+GhGrOTmGGG
Checks for missing Authenticode signature.
resource |
---|
a7104b687a78df51b229d58abe7692facca0db14ddb79a524f114417ab49b444 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ