TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
qen0yq24m3482j8g8w
Static task
static1
Behavioral task
behavioral1
Sample
2.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2.dll
Resource
win10v2004-20240802-en
Target
2.dll
Size
39.3MB
MD5
61ba5c2183a50023a2306ab1dc7984f6
SHA1
001deafd023dba8ae62d17de81efdc70a46cf9f7
SHA256
012a54778fec0a30a20b7607d771bfcf113899fd3e64377739724b41dacecb1d
SHA512
6d544cfcf798d3f3d4fdd2e1aedd3d23845222026ddd5fe2f5293b842aee1f023b1d865915105ab92b81ce19bce10c792d73b1af2c9572cf68c42c6ffe34c7b3
SSDEEP
393216:6H2Z7jLUMGe68seFOPQ472jCsRbue7KCFcF/H/p+LwlDTukXcm+AlB+8emU+JnGn:FZ7jQMG0bRuCIfamzflXe0zOb
Checks for missing Authenticode signature.
resource |
---|
2.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WNetEnumResourceW
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ChooseColorW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
accept
DdeSetUserHandle
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
BCryptGenerateSymmetricKey
SHGetFolderPathW
CryptUnprotectData
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
qen0yq24m3482j8g8w
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ