TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
Elscheatx64.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Elscheatx64.exe
Resource
win10v2004-20240709-en
Target
Elscheatx64.exe
Size
11.7MB
MD5
f9a4401401f7c2878f2f41103e8ae621
SHA1
2a997b7aaf75f12eec434671266ad665efb94a01
SHA256
21be3b74f6850fa4af357b9ff1996d82f5fc6e53285780898943355ae2a050d3
SHA512
fac007c307777ffdac1ee03457a2a2cce1b03836cb1430f092b1dea957e61b0130ad65a576a4495de9babea859074181f9fc15956e33cb99c73c682cf5a28f3b
SSDEEP
196608:trB+epADuNPdZ3wT9TTruhL0D4ji36AWwjc82iUjk/AyCEGSpqWEY:trFmKlqTML0DaiqA68Kk/APre
Checks for missing Authenticode signature.
resource |
---|
Elscheatx64.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
lstrcpy
InitCommonControls
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ