__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
6fa1a2735e92e51ee51cd0feedc3575db186f2c09d13e9faab8b27093a875c9f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fa1a2735e92e51ee51cd0feedc3575db186f2c09d13e9faab8b27093a875c9f.exe
Resource
win10v2004-20240709-en
Target
6fa1a2735e92e51ee51cd0feedc3575db186f2c09d13e9faab8b27093a875c9f
Size
187KB
MD5
6e43cfc18c2c7ca27024303de19908b3
SHA1
53c69bac48dce403860eba2d1762b8dc304c80f5
SHA256
6fa1a2735e92e51ee51cd0feedc3575db186f2c09d13e9faab8b27093a875c9f
SHA512
9ffd47fbe0c5ecbc5121859cbf87e07d78e449d2c541bba913a3dbba149f4aedd640c9484154cb23435e030c280714a1d48903a66fa1e2bbd66c509a84a0e631
SSDEEP
1536:3nIGdh4vElywexcmeFVSP5XT8GhNtAU+zc2XxI3JXmcVDEgZ2Fdis8IFhDRwRR06:3c8eBeFV6T8qf8eZLzZ2DnFh6ROM
Checks for missing Authenticode signature.
resource |
---|
6fa1a2735e92e51ee51cd0feedc3575db186f2c09d13e9faab8b27093a875c9f |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SysFreeString
SysReAllocStringLen
SysAllocStringLen
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
MessageBoxA
CharNextW
LoadStringW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW
Sleep
VirtualFree
VirtualAlloc
HeapFree
HeapAlloc
GetProcessHeap
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
SizeofResource
SetEvent
SetEnvironmentVariableW
ResetEvent
LockResource
LoadResource
IsValidLocale
GetVersionExW
GetThreadLocale
GetTempPathW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetFileAttributesW
GetExitCodeProcess
GetDiskFreeSpaceW
GetCurrentProcessId
GetCommandLineW
GetCPInfo
FreeResource
FreeLibrary
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
SHGetFolderPathW
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ