TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
87fe8a22b49af42b7771edf962a9ea4545bdf3a222490c6340e5bbd0b8d8c3b0.exe
Resource
win7-20240903-en
Target
87fe8a22b49af42b7771edf962a9ea4545bdf3a222490c6340e5bbd0b8d8c3b0
Size
7.1MB
MD5
ffbe31043bf32da03984d7795af8f5f5
SHA1
d4eec7afd189dad6289db116f106fb1371c73a0b
SHA256
87fe8a22b49af42b7771edf962a9ea4545bdf3a222490c6340e5bbd0b8d8c3b0
SHA512
e34d42c0183df6ebe0b277bd885474ade452ca107538ffe0894ee52fef2b7b70fd6410c1353f15707575b4a7ee593ae5f3ae7b3940241ec20de1b4b7663cc63f
SSDEEP
196608:C7tsOyEU919Tf5o0lZA5JnOBAx7l7nJfn6PRKhf:CBsOyEU9D9ZA+BAJlnJiZM
Checks for missing Authenticode signature.
resource |
---|
87fe8a22b49af42b7771edf962a9ea4545bdf3a222490c6340e5bbd0b8d8c3b0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE