TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
e81d7f5d8984fb26a25f50729223dad8898ea729aa560d972bd107f7e13a14b1.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e81d7f5d8984fb26a25f50729223dad8898ea729aa560d972bd107f7e13a14b1.dll
Resource
win10v2004-20240802-en
Target
1bb2110f043959f5f2eb4fcbc13f22cc.bin
Size
20.6MB
MD5
764acf9e7930d389c996fa71f52262cf
SHA1
947e65aa590b2f6e91d8a213f422937c3d6e5c79
SHA256
c558e7029eb1f9bc961b51f674eb373f7389f626efa7940f35652bb3c3cbf9d6
SHA512
21c359fc931b2f5d4de0ef678e04103393d7ce3ad2666b2ca12f142205fffb02fe7a3bb4f96ed87788d52e4adef9bacccdf0f03b89bf135ffff9f956f42a5440
SSDEEP
393216:lqIchqfLD6q+YAw/wMWshwSzcKi9ZQH5mE3PmCYQ/O1NMWX:EIcQ7+KhwSzc9K5tr+
Checks for missing Authenticode signature.
resource |
---|
unpack001/e81d7f5d8984fb26a25f50729223dad8898ea729aa560d972bd107f7e13a14b1.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ