TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
cde2d92123a3c4c675622cc8b5b275107a028d179b05b0bb631c2a52b44ec143.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cde2d92123a3c4c675622cc8b5b275107a028d179b05b0bb631c2a52b44ec143.dll
Resource
win10v2004-20240802-en
Target
4de9c17c9b764b14c2901d98a82e9b27.bin
Size
20.6MB
MD5
6a9c2d14897e8ee95614e0dee7ff56a8
SHA1
85069426f53aa340bc6d60cb609cccbc46a2e1ce
SHA256
5171895415cf643d3685c3a38c6c3dcdbadfca653ac7b8aa0d89414d93d20870
SHA512
a4083629bc99b2385b5484516321990129ba41d801487e0dd5dd9178b693e79bb7465fce2b3139c1e1a546075c39c971219d2fbda72176ddf9c2fa7ae5a5581e
SSDEEP
393216:iWVTZHHj/FkoQiVCjgEsdej5DTfD4xfU+0QCTT7QtehFyzlksbke7Jk/zLz5vegT:PVHiVixEzpTfDxf1T7QohFyzBkQ+rLYK
Checks for missing Authenticode signature.
resource |
---|
unpack001/cde2d92123a3c4c675622cc8b5b275107a028d179b05b0bb631c2a52b44ec143.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ