TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
f94ad0514e5824406f45efccef7b05eaa1e91df9d883eb095c1d9f36d8c53869.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f94ad0514e5824406f45efccef7b05eaa1e91df9d883eb095c1d9f36d8c53869.exe
Resource
win10v2004-20240802-en
Target
f94ad0514e5824406f45efccef7b05eaa1e91df9d883eb095c1d9f36d8c53869
Size
4.0MB
MD5
d6ceb06a654da7bac0e1ecc37bcbab72
SHA1
57ce1141f4d91c618e809bfc90b311045aa8fa8f
SHA256
f94ad0514e5824406f45efccef7b05eaa1e91df9d883eb095c1d9f36d8c53869
SHA512
432d31aba3ea177942df824cfc4ac0c247892bae656a65e1a53e7022b0e6500351f57da7076e5878d6a4ce6e4d5ac4619e753d069e6ec34aa030b250108ee815
SSDEEP
98304:nejuFFJ8WdTHxJzhtKH/tCuJF4s9J/+WzPnAt42:neyp8W1brKH/tFF40LzIH
Checks for missing Authenticode signature.
resource |
---|
f94ad0514e5824406f45efccef7b05eaa1e91df9d883eb095c1d9f36d8c53869 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrRetToBufW
VerQueryValueW
GetDC
GetProcessImageFileNameW
VariantInit
FreeSid
_gcvt
RasEnumConnectionsW
WinHttpOpen
sqlite3_free
bind
Pie
WNetGetConnectionW
timeGetTime
InternetOpenW
PrintDlgW
ImageList_Add
SHGetMalloc
WJSOpen
OleDraw
GetIfEntry
NtDeleteFile
SetSuspendState
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE