TMethodImplementationIntercept
__dbk_fcall_wrapper
d7f2wtqkn007873cnj
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
846598080f351cf7715c3510ea3ba98d049ca867bfa9db3d23154ba5c88a3736.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
846598080f351cf7715c3510ea3ba98d049ca867bfa9db3d23154ba5c88a3736.dll
Resource
win10v2004-20240802-en
Target
846598080f351cf7715c3510ea3ba98d049ca867bfa9db3d23154ba5c88a3736.dll
Size
38.8MB
MD5
5020b602da0255c7cd4043d36c90dce3
SHA1
95a5160cb4c8cc07ce05d88c2b92ca3b5e0fa39f
SHA256
846598080f351cf7715c3510ea3ba98d049ca867bfa9db3d23154ba5c88a3736
SHA512
1b557f2db1392d3012d1326f2ebea3f0212111ce388c31e0ed03256fa1cbbff08e11e023582e6d0e937338ebc5aef5ddda33c830fade01072d69a2489f8ad30f
SSDEEP
786432:xNJ08HIesS8AoM7NtFATGW0YqXG2jES5:yMRDZbXG2R5
Checks for missing Authenticode signature.
resource |
---|
846598080f351cf7715c3510ea3ba98d049ca867bfa9db3d23154ba5c88a3736.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WNetEnumResourceW
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ChooseColorW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
accept
DdeSetUserHandle
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
BCryptGenerateSymmetricKey
SHGetFolderPathW
CryptUnprotectData
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
d7f2wtqkn007873cnj
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ