TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
2576235367a269aac9ca7feb89bc1979357cacb20216e9a84971938492657400.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2576235367a269aac9ca7feb89bc1979357cacb20216e9a84971938492657400.exe
Resource
win10v2004-20240802-en
Target
2576235367a269aac9ca7feb89bc1979357cacb20216e9a84971938492657400
Size
15.4MB
MD5
56256eec9341a1e6f4971ef589b7e06b
SHA1
45be03b8deaa0a6833fe262910995bc325028ed7
SHA256
2576235367a269aac9ca7feb89bc1979357cacb20216e9a84971938492657400
SHA512
40081d68e5c0b664ec10253cac29ce509b03517545af642a201e3e641f21567396f5bdc1736f60b81937f9d3992866d5961d6ea4e6488eed32d6fd21460d5cb1
SSDEEP
393216:cOwGimRMmCIuMYs90T5Bax6Tf9eCoFyOh/rSdV7dP:BwrmlCIuWkfaxi9HOhTSdL
Checks for missing Authenticode signature.
resource |
---|
2576235367a269aac9ca7feb89bc1979357cacb20216e9a84971938492657400 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExW
GetVersion
SHGetFolderPathW
GetFileVersionInfoSizeW
CharUpperBuffW
SysAllocStringLen
memcpy
NetWkstaGetInfo
RegSetValueExW
WinHttpGetIEProxyConfigForCurrentUser
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ