TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
l6pc378ot0013b4tfy195
Static task
static1
Behavioral task
behavioral1
Sample
3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3.dll
Resource
win10v2004-20240802-en
Target
3.dll
Size
25.8MB
MD5
778bff565bba4fce13af726ce1acb091
SHA1
1f0cee9b2c042fccbbc23c15f584d5bc89010906
SHA256
961ed5708f3e514d1017a5d9680b75739730150ec54aa81ed29a68d9d4f7fd05
SHA512
3661d5f5a616cfab95abd2aa028f74b777eb67dda1db7cce172894e51d600c50f0deb93ef8222a65e50c29b6800c51993185d264d41ee9d22b1b73a2242d31aa
SSDEEP
393216:IZh5Z7cStWxcpgjzflAfH/Oeov9FJ9gMAlbybXh:Igjz6Xjo4MAlbyL
Checks for missing Authenticode signature.
resource |
---|
3.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
l6pc378ot0013b4tfy195
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ