TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
Static task
static1
Behavioral task
behavioral1
Sample
bcce330252499016668ddc0ebbe094fceb55539186f03ed2ad3b2b47072ce370.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bcce330252499016668ddc0ebbe094fceb55539186f03ed2ad3b2b47072ce370.dll
Resource
win10v2004-20240802-en
Target
f1bb150231c7b090f52e29d890e88872.bin
Size
20.6MB
MD5
1f9090bc6a5d16af2153c46010fd9ba1
SHA1
b3997940c51fa342fbbcac74e53dcf71a455e8a0
SHA256
26bc85c58ee565c3141d1991d5f277ae2dbecb4ed2dedf12ea32931d6a1371ca
SHA512
f1339c004d467d02215ec9762c7a6064c9ed08d166ab686cdc5088b1239e558c9a812989c3c03d09a0818aff60537cb6bb2858a562a4d3ba792b6e13ffd7460c
SSDEEP
393216:73ag/vCfxWrqk2TJ/F0GgX2//fkgyMvqZ/IameoL0pMm2nQFlNdHXstcIQjKJhiF:LcWrDMJtKX21jq5weoL0p52nQFlNdrRd
Checks for missing Authenticode signature.
resource |
---|
unpack001/bcce330252499016668ddc0ebbe094fceb55539186f03ed2ad3b2b47072ce370.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
krh0c5pl9lz0og07s6o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ