__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
XaraDP_Loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XaraDP_Loader.exe
Resource
win10v2004-20240802-en
Target
XaraDP_Loader.exe
Size
64KB
MD5
b36ea488c31e5029de36d2e9ed758825
SHA1
75aeb9ac553cad51563473e9508352ef126915fd
SHA256
4b53ba7ea27dcbb3db47e74f1f4d7ebd775bd5272545856daad1718beb5dcfef
SHA512
4b632fc5c023e2528d32f26e9953306aef13e703d7cdf5e89545ec3460fa19d4cd542d74e9eb58324c42c6ebb23591f0f8482bdcdea01183419c6a206a3b0561
SSDEEP
1536:sd9inScEKKIc6cHiRQf+1FedqHz9kZ13mq:s7inwKKIcxk1F6YkD3mq
Checks for missing Authenticode signature.
resource |
---|
XaraDP_Loader.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
SHGetPathFromIDListW
GetMappedFileNameA
CoTaskMemFree
VerQueryValueW
LoadIconW
SysFreeString
FreeSid
SaveDC
NtQueryInformationProcess
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE