TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll
Resource
win10v2004-20240802-en
Target
55001b59a762a76ca7799184309d7f25.bin
Size
20.6MB
MD5
4935dc8ddfeb25c7af6eef2ce5046bd9
SHA1
9bd1f61e6bb5fd33d90ef4d8966eba0b3eb54b82
SHA256
d85ad05d51c0454e4255f1dae1608549596b2dc50988bbb7423cdb68ccbb8141
SHA512
04e6d0c153870ef4ee521aa69c70836c8bd49a2f79dd1c5a1522ed9498e90be0919d0f3b9c813184a4344cc502c08aaa67ac8d120fcc8020bafda2ff226fe709
SSDEEP
393216:MOYEbzk5c50arcbdkGdLz/82HQyQLPUo+yEAPUSTLbtgQRQKSkIOhTN:MV4z/ncbdkGZz/ZQLPp+evtgQ6kvN
Checks for missing Authenticode signature.
resource |
---|
unpack001/65641f39eed02adc754ab6dadb8988a3d8a70184224ec77b4089aea21e9e5b08.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ