TMethodImplementationIntercept
__dbk_fcall_wrapper
bgdaitrkvoke
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe
Resource
win10v2004-20240709-en
Target
384c631c23adc699f15b51d5cc76095f.bin
Size
16.4MB
MD5
5b11fefc202da7475c36349dab7706f9
SHA1
3f0e0af31d66fc52097b3e4018f9f1dc0245a055
SHA256
52fd5e7b94177b7f209cf965224be1b47b1665aff917e9f5f6628b8b43e9f15b
SHA512
30429713251db5dba720bcd2a1fb6c53eb1fb7390012d3107e79af9df3559755e73b158fbbf68246c5e9ab07b064b855eaabf84915e51747d131f5af9f8fe7a9
SSDEEP
393216:k1uxu0kQ461rReWnLF+9lgyDPw0sKP8p4p5rfnUY/XtH5j:hxdkQzh0QU9vk0shpQiYTj
Checks for missing Authenticode signature.
resource |
---|
unpack001/4b6f34ad409a904fe3e50e8ec83feb73eaa5ae501253b077ef94456c9dabdf0e.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
GetVersionExW
DocumentPropertiesW
ImageList_GetImageInfo
Shell_NotifyIconW
IsEqualGUID
GetFileVersionInfoSizeW
CopyImage
GetErrorInfo
NetWkstaGetInfo
RegSetValueExW
Pie
TMethodImplementationIntercept
__dbk_fcall_wrapper
bgdaitrkvoke
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ