TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
97ac51cc944ca0e4c997f0631105888d06d407069469830187dde63063c19466.exe
Resource
win7-20240705-en
Target
97ac51cc944ca0e4c997f0631105888d06d407069469830187dde63063c19466
Size
6.5MB
MD5
ebbe79bd4c76680667420da99dbac422
SHA1
df62c07451f6710b6bed0889a2c90b16ab15c6f0
SHA256
97ac51cc944ca0e4c997f0631105888d06d407069469830187dde63063c19466
SHA512
e7a0cb187d8752ab806a6534d3917c1c4d1b455a2d2c9bbbcda89f024dcb64ced2a66cdaabf9199e77ca9f28736a616ed7905bbf15d81c3b5402f7022fc91032
SSDEEP
98304:lM7KftknC483B4/udQfg9U7NwiZouTL/u2VRybItweFTKDBN7aFaKz:Tfv48B9dCqUugD/jrcIBQvacY
Checks for missing Authenticode signature.
resource |
---|
97ac51cc944ca0e4c997f0631105888d06d407069469830187dde63063c19466 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE