TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll
Resource
win10v2004-20240802-en
Target
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll
Size
25.7MB
MD5
55001b59a762a76ca7799184309d7f25
SHA1
2a773d4d5440004bbdfa4a45cf4205e12603dc0e
SHA256
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08
SHA512
7e3167b22de831f895af7f71d773eed99f3ea3c4db9a7ad78f1be9e84ed36625616134a6a17114b05aa774f6a8de84569e8ac524c179aec2bb65eeb882f9902c
SSDEEP
393216:WwDWT+VTKBElAY3e/+bbL3WyjPtfPDgqXH+IRpjhofUqcwQO:NVTXy8RbfWy7tfPDPH+WhgfR
Checks for missing Authenticode signature.
resource |
---|
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ