TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
9419ec3be217809bc01f1c9e2b54cede02aec72f3fc513aff51414b9e63851b9.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9419ec3be217809bc01f1c9e2b54cede02aec72f3fc513aff51414b9e63851b9.exe
Resource
win10v2004-20240802-en
Target
9419ec3be217809bc01f1c9e2b54cede02aec72f3fc513aff51414b9e63851b9
Size
5.1MB
MD5
72e360d64d4060a1f18117e88d7feb3f
SHA1
b8f79a39c1703ddecea07eac4cad1712ac8240bc
SHA256
9419ec3be217809bc01f1c9e2b54cede02aec72f3fc513aff51414b9e63851b9
SHA512
14eff0cb155603348d0e807ea947d66dd6c88cb2935c7bc1062d5fa9258e70276ef81d4208d21945ede4727edd67ce816e01bcd254f997f2f1119898fdff16c5
SSDEEP
98304:Q/pgQ/DPHrxVSOAzJCYMC20Nw1M72/zlU+FbSQ31PNGUyointu:Apgybrx8OA1MCT6272/5U+hN7ktu
Checks for missing Authenticode signature.
resource |
---|
9419ec3be217809bc01f1c9e2b54cede02aec72f3fc513aff51414b9e63851b9 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExW
GetVersion
SHGetFolderPathW
GetFileVersionInfoSizeW
CharUpperBuffW
SysAllocStringLen
memcpy
NetWkstaGetInfo
RegSetValueExW
WinHttpGetIEProxyConfigForCurrentUser
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ