TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
562876ce689bb477f654a9a8490b8ad2bbafe2af5319b24446adc54e0b67d58e.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
562876ce689bb477f654a9a8490b8ad2bbafe2af5319b24446adc54e0b67d58e.dll
Resource
win10v2004-20240910-en
Target
06e899ee09f078d47d0f400b49e189f8.bin
Size
20.6MB
MD5
b476790ce3744600cb11218fb5288317
SHA1
a198cc307561e9116d6a89a1f24b7eef8f1bc68a
SHA256
ae730ade30fc0b048bddfbf0a6ade9dc8217349f4a202299429a540eaad48ca2
SHA512
642dd213b3fe9c83d78eaf73346eeb89e1fd66c32b636ea852880e9ca7c237ba7df0ba4c56c33704a642b8030197dd3107f7197e09219012d15815cb7a4ce1c6
SSDEEP
393216:54+CKQJl9RGE0Z+55xrgaxYLQPpuJ9bT2Zs8zgCr3kwjixl25TWC3Swm+a2:u+C7J3gRZcxHmLQPpujH38zN3kwjixlq
Checks for missing Authenticode signature.
resource |
---|
unpack001/562876ce689bb477f654a9a8490b8ad2bbafe2af5319b24446adc54e0b67d58e.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ