TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
qd3oay36p0y1qf8340x
Static task
static1
Behavioral task
behavioral1
Sample
514df3b6ec10d847669c6c6e7b1f71459fab3fcc7530ea39995a077f63b58fdf.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
514df3b6ec10d847669c6c6e7b1f71459fab3fcc7530ea39995a077f63b58fdf.dll
Resource
win10v2004-20240802-en
Target
514df3b6ec10d847669c6c6e7b1f71459fab3fcc7530ea39995a077f63b58fdf.dll
Size
38.9MB
MD5
6c79f70c82522ecf86b50e8254a68d7b
SHA1
bfb5832bb9bffe54929000200ee666f028fab1b5
SHA256
514df3b6ec10d847669c6c6e7b1f71459fab3fcc7530ea39995a077f63b58fdf
SHA512
41fcb77c6ada072fc8b529985fef2dccccc72bfb274220b32177c172a07a7d1c0450ec3ab9abc9652361bb8cd97df3717a9891db8c152a880c9d0023464a4dc8
SSDEEP
786432:j72VoAJARRLIdde3mgfP7/8YpPYU22XM3iKlysRX6e:KLARRqdcfhpbeysZ
Checks for missing Authenticode signature.
resource |
---|
514df3b6ec10d847669c6c6e7b1f71459fab3fcc7530ea39995a077f63b58fdf.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WNetEnumResourceW
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ChooseColorW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
accept
DdeSetUserHandle
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
BCryptGenerateSymmetricKey
SHGetFolderPathW
CryptUnprotectData
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
qd3oay36p0y1qf8340x
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ