TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
8ea31e45aca30a207f7a3619d308eb1a30a5f062c57e8ce2bd0c4637526cb44b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ea31e45aca30a207f7a3619d308eb1a30a5f062c57e8ce2bd0c4637526cb44b.exe
Resource
win10v2004-20240802-en
Target
8ea31e45aca30a207f7a3619d308eb1a30a5f062c57e8ce2bd0c4637526cb44b
Size
832KB
MD5
9b1afce65265aa349e168967aab44347
SHA1
489528d676d7b6867ee5b0c346223b1eaeabd99a
SHA256
8ea31e45aca30a207f7a3619d308eb1a30a5f062c57e8ce2bd0c4637526cb44b
SHA512
16dab2c74a7479eca4eb80fa2d4f08c7b3feea29fc258df44fc0b83122994e71e763ee4bc19879cd07c797392f9f8feb5485c7c764d21a8fe61e8bbc87663fe6
SSDEEP
24576:34FApliUbLXWarhRrh1IFoYlZu/16jashMAj08dVXDt:3DZfXWEhdaZlZuN6jXhMibV
Checks for missing Authenticode signature.
resource |
---|
8ea31e45aca30a207f7a3619d308eb1a30a5f062c57e8ce2bd0c4637526cb44b |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExW
GetVersion
LockResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenPrinterW
FlatSB_SetScrollInfo
ShellExecuteW
CoInitialize
GetFileVersionInfoW
EnableScrollBar
VariantInit
NetWkstaGetInfo
RegDeleteKeyW
StretchDIBits
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ