TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
g99cs803m053g8cnr8qspf
Static task
static1
Behavioral task
behavioral1
Sample
e0e1cbf4b1a707dd07ab3905b8fdaeb953138903b67b57dc540ae17e774b9352.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0e1cbf4b1a707dd07ab3905b8fdaeb953138903b67b57dc540ae17e774b9352.dll
Resource
win10v2004-20240802-en
Target
e0e1cbf4b1a707dd07ab3905b8fdaeb953138903b67b57dc540ae17e774b9352.dll
Size
25.6MB
MD5
30aa82908875452fdd0ee0980c2e7c61
SHA1
fae5523c2fe62e5da68966fa335d2e6bd7dcddeb
SHA256
e0e1cbf4b1a707dd07ab3905b8fdaeb953138903b67b57dc540ae17e774b9352
SHA512
820e5d1599962f9512a772d2fc16d17ce1a11f9aa2f099927e8fd50798714c5b4c8c84eba6eaf8701bb718050e023d0eb443fb39263bdd355e877b8288071b0e
SSDEEP
393216:yP7o7K4hDHgKVqrU2+ypdz+i/GJOzUEPHCRRnPxwCMVlZDIZhVgqjR:vKGqd+01+iSOQEPC7PJMVl9Khrt
Checks for missing Authenticode signature.
resource |
---|
e0e1cbf4b1a707dd07ab3905b8fdaeb953138903b67b57dc540ae17e774b9352.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
g99cs803m053g8cnr8qspf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ