TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll
Resource
win10v2004-20240802-en
Target
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll
Size
25.7MB
MD5
19c26bdedf0e4ebc6443940c10f684fc
SHA1
7437c60a8f6865ebbdae70d1e209d078c7903834
SHA256
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973
SHA512
2a2a8c30b551a507009871447cb2a9a57457d2879718c2275685b8fc009984059a321cb0ccfd06e8b30a79d73906ea6cac0a91878e601716b2a065247dcc601c
SSDEEP
393216:WwDWT+VTKBElAY3e/+bbL3WyjPtfPDgqXH+IRpjhofUqcwQz:NVTXy8RbfWy7tfPDPH+WhgfS
Checks for missing Authenticode signature.
resource |
---|
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ