TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
c074b971f039a97aadde34182f71c419b6d6a9c6da4d72854a6951dcd087a378.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c074b971f039a97aadde34182f71c419b6d6a9c6da4d72854a6951dcd087a378.dll
Resource
win10v2004-20240802-en
Target
573fb3cf8297aff9d2412970a1656795.bin
Size
20.6MB
MD5
ff1d9a4d43d80166dc2be003b345e2d9
SHA1
62e80e16037f542af3973e658815d14f4f5e4354
SHA256
9d89f48d894a2c0d6d37bcfda9aca4a2f5fc5c844849fbc70d9dd2e67859a4f7
SHA512
6e044456d5692eb27e4a4f7a620f694fa34d9b565bb53989154ae080e092e6e82500cd575d33f30d082e342645d9248752371810fb3d57f098633d898c7cc83e
SSDEEP
393216:0F3Z7AeCktstCTvCMSb/aj3bPWSsulBM1lUlk3Aq58FGSPt70:0T76kuCTqMSmrBBupz5UGyx0
Checks for missing Authenticode signature.
resource |
---|
unpack001/c074b971f039a97aadde34182f71c419b6d6a9c6da4d72854a6951dcd087a378.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ