__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
LS.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
LS.exe
Resource
win10v2004-20240508-en
Target
LS.exe
Size
25.6MB
MD5
ee3d0fad544f8f96dce40952a1cbc829
SHA1
82ed6fe0b89a9a76520f8701b5a94fbff160994a
SHA256
d533eec5f5f2fe8f85a98620b5ab430685f41471d9b016e101d5bda623f17084
SHA512
cf8e4c5184da9269a1a2227c598b835703f57d60c174657d44e2ca90fe1081b74ad02c2326de180292eb54a179911d46295f598d22b051cba2e917fb8807189f
SSDEEP
786432:FZZ7efGMWmdvYWMiY0X38KOuKbClpr3CW4T5:PZq5dvNMiYWMKrKbwr3CT5
Checks for missing Authenticode signature.
resource |
---|
LS.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WNetEnumResourceW
timeGetTime
SHCreateStreamOnFileW
DocumentPropertiesW
FindTextW
__acrt_iob_func
ImageList_GetImageInfo
ExtractIconW
CopyImage
GetFileVersionInfoSizeW
_ismbblead
SafeArrayPutElement
NetWkstaGetInfo
WTSUnRegisterSessionNotification
CloseServiceHandle
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
OleRegEnumVerbs
wcstombs
strncpy
AddFontMemResourceEx
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ