TMethodImplementationIntercept
__dbk_fcall_wrapper
bgdaitrkvoke
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe
Resource
win10v2004-20240709-en
Target
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe
Size
20.2MB
MD5
384c631c23adc699f15b51d5cc76095f
SHA1
6a57fdb476b4f42d4d0354609fa1bffd0a3a475a
SHA256
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e
SHA512
1fa4de0506ccf40fad9e56a4ae30dbbb2346f70e03bd5e1c3330570039c6050d7ac1c485d6ed0a1ae43475041afa679638cd9edab482cba498f23e25d6e3f129
SSDEEP
393216:4fsMHgg4a90W4B4ObLRpniqJcLRygBu8:u5HggL90W4B4ObLRpnxJcLRygBu8
Checks for missing Authenticode signature.
resource |
---|
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
GetVersionExW
DocumentPropertiesW
ImageList_GetImageInfo
Shell_NotifyIconW
IsEqualGUID
GetFileVersionInfoSizeW
CopyImage
GetErrorInfo
NetWkstaGetInfo
RegSetValueExW
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
bgdaitrkvoke
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ