TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll
Resource
win10v2004-20240802-en
Target
19c26bdedf0e4ebc6443940c10f684fc.bin
Size
20.6MB
MD5
06b7a14ac3a422486ddcc93df96c9662
SHA1
6d54b1715a296b4c89f22d242b7766bd357df85d
SHA256
ca181ff297cb406626b378ec97c33a2cafb9f17f8edfdf8f5e1f09c62cd8e53a
SHA512
ac258b616e7e4d405b44b34a6b708a9671959241e9bf491fa08d94aabcd58afa26f7cbb283eb4408107f6c9e8f7013712b8e822bee73c102e4c35be360aa3a57
SSDEEP
393216:nMe8uF8snuA+bZGYvwagVF3y0b59IJlAHo8elYDbNtybLadZv3zDFpF8qj:MxS87AtY4fvbsMI8euDbSbL8Nf8q
Checks for missing Authenticode signature.
resource |
---|
unpack001/3cc72d59564f649dcd87f1f8f45d032fb6336cbb6969dec5d3c12ff17a35d973.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ