TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
f0aafbf531e08a0d1370d74e1a908a465613f27017a48dd6110424028c1bb737.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f0aafbf531e08a0d1370d74e1a908a465613f27017a48dd6110424028c1bb737.exe
Resource
win10v2004-20240709-en
Target
7746635b26b9399419bd5542b2770dbc.bin
Size
24.2MB
MD5
ece0cb5108031355e86659c00ae352a8
SHA1
785f59e9f5bce63a169297e92609a7b933f5cff3
SHA256
1a0e785315fab4a35a7a7ad8a4b1a6ded6dc5a2e1842cef6d28ce9a7296eb04c
SHA512
28e2c6e3720309bba6a7ba5ac78aa0091dcfb5ab2bb598d0e8e9ba28cc5647f7dfce49318494d123cfe3664021238ac536243164373bc85fa4b8f7d1675cc26c
SSDEEP
786432:wa5rp1bM2Qk2/wPoKDBKpnMAQNTnOAAT1B:wa5rLMvk2/wAK9EMAQRnOdz
Checks for missing Authenticode signature.
resource |
---|
unpack001/f0aafbf531e08a0d1370d74e1a908a465613f27017a48dd6110424028c1bb737.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
RegQueryValueExW
RegUnLoadKeyW
CharNextW
SetClassLongW
EnumDisplayMonitors
GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep
UnrealizeObject
VerQueryValueW
NetApiBufferFree
CreateStreamOnHGlobal
InitializeFlatSB
memset
ShellExecuteW
SHGetFolderPathW
InternetReadFile
OpenPrinterW
GetDefaultPrinterW
timeGetTime
MagSetImageScalingCallback
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ