TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mtox0cio78umzzyhosjh8r
Static task
static1
Behavioral task
behavioral1
Sample
372380a072ee0803d98166e34269641f88793632340f11f6e51e3eb7038779f6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
372380a072ee0803d98166e34269641f88793632340f11f6e51e3eb7038779f6.dll
Resource
win10v2004-20240802-en
Target
388fc37f4c6c2aff2f5e16cc9327fd36.bin
Size
22.0MB
MD5
40c40f764f69e4b0f9735f811079f8dd
SHA1
d4f71cbcf2d67b68dd2644b83359da2202306034
SHA256
9bf4f6153f425f7f1f8ef08d2ac3289f12ec3b7bbd3ed5e12b1d9a76563ed829
SHA512
83984caa5b6d430882f09ccc862eabe9d11e527069362925ea28726f5e9c43bfa5aebd9d851ac996d5651b56734012d68c7623c9ec1581d920784d29dea987be
SSDEEP
393216:IZto6/ZJmRjxZazfEtFgHnlrJJ+CcK12+QfwPu0QHq3qcqQD3ALUHCc9VXKVfjlh:0o6/ZYlxZE9HnpJot5f4uIDQzcrK1P
Checks for missing Authenticode signature.
resource |
---|
unpack001/372380a072ee0803d98166e34269641f88793632340f11f6e51e3eb7038779f6.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
mtox0cio78umzzyhosjh8r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ