TMethodImplementationIntercept
__dbk_fcall_wrapper
c0f2os69c01rr01g
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
JuhnladbIs.qao.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JuhnladbIs.qao.dll
Resource
win10v2004-20240802-en
Target
JuhnladbIs.qao.dll
Size
25.6MB
MD5
012e7f70e058e235e114a286611febf3
SHA1
cbad240830d1296328078a6c8c42d6e2bf68d79c
SHA256
f6d65be8ff695e6c0836fbfc7f4bb5891ad855732846583287186bcec6cec45a
SHA512
91d16f31c8ad074252b96ef293eb26ba4fde06f9895bb965395df3f21584dfbaaf197fac55e279490e9f1406ec57578efb128bbdf72a2e0f497a71884126f416
SSDEEP
393216:AYhnp/QG9eBdmMmu1M5VXYHxEAd15xctzAoIyGzO5NeHWH+ARqC2DutTA:fH9SVm5VXYHxv5xZyr5NeHG+ATamTA
Checks for missing Authenticode signature.
resource |
---|
JuhnladbIs.qao.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
c0f2os69c01rr01g
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ