__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
9a6b48fc3adba5ff6dc11ca9986cae98292ffdddc195200eae74d3c64a752eb0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9a6b48fc3adba5ff6dc11ca9986cae98292ffdddc195200eae74d3c64a752eb0.exe
Resource
win10v2004-20240508-en
Target
9a6b48fc3adba5ff6dc11ca9986cae98292ffdddc195200eae74d3c64a752eb0
Size
3.4MB
MD5
10aad1e36a2817e1b01de0211269fa37
SHA1
51152f0dfbfa03e5fbf888c61310b88849f0da4f
SHA256
9a6b48fc3adba5ff6dc11ca9986cae98292ffdddc195200eae74d3c64a752eb0
SHA512
80b2b9d2b14dea56c29a0d86cac3a9164884d220c778a7adac050771a96ad214faeb4d25dd4e593be613a0a1b699afc36055f066d06d1fa0e64bd8fc2b0beacb
SSDEEP
24576:IlM5zR3ktuFbDWygAiF4q6N407ToTz9Pv1w+FusNyYFl0MEtcZ38Hjav4GlNd1Ci:LfWygjF47ToTVyYFBEtcZ38Dav4YtTF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9a6b48fc3adba5ff6dc11ca9986cae98292ffdddc195200eae74d3c64a752eb0 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE