TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
73aa17c25a290961fd5c9a4bb2eeadb29b944ecb9b0ddf09fa17ba9aa9e65181.exe
Resource
win7-20240903-en
Target
73aa17c25a290961fd5c9a4bb2eeadb29b944ecb9b0ddf09fa17ba9aa9e65181
Size
12.7MB
MD5
696ac818e29e6872f3f0caeeaed82030
SHA1
fa02d286692f17c3b5b5d51e2c32f310da0050e1
SHA256
73aa17c25a290961fd5c9a4bb2eeadb29b944ecb9b0ddf09fa17ba9aa9e65181
SHA512
9c3b8bd7dc84dbad03cb606bbec28af84e8814a4f7710e22060b240fe782bb57a103d2f812ce2370fa27be7e30e5abe5adb1581ef5da56a5bb62c6cbf448d30c
SSDEEP
196608:fbozoOI9YhSaMd03eduI3fcQBhPW+CUoSRexW9LpZtvUBWf0GXW+1U1:pOI9cSh/dEy+woSRtVPtcBWfVWwU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73aa17c25a290961fd5c9a4bb2eeadb29b944ecb9b0ddf09fa17ba9aa9e65181 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE