TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
f1277fd7e98fe3ed0f7521727d6216ac19f23c92e9f6d97147696462024a1cd5.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f1277fd7e98fe3ed0f7521727d6216ac19f23c92e9f6d97147696462024a1cd5.exe
Resource
win10v2004-20240802-en
Target
f1277fd7e98fe3ed0f7521727d6216ac19f23c92e9f6d97147696462024a1cd5
Size
4.0MB
MD5
83c3d9df10db13080fe2de4e4140f0a4
SHA1
e9940109c3e3c18925ca3ef25d5974eaea576fd5
SHA256
f1277fd7e98fe3ed0f7521727d6216ac19f23c92e9f6d97147696462024a1cd5
SHA512
3f1b9ce999e26903593825e035e78403523393a3f93cd794ea66bfc195d278623691a72d0885cae694002078c180dca4d9be0f0c8cfd2ab0fdcbc3170229749d
SSDEEP
98304:ZN0/ZROthHKLf5J6YF2uHCozP3Zf1PGSH63Q6YcOtsm:ZN0vhLfa02uHCozP31N77vWm
Checks for missing Authenticode signature.
resource |
---|
f1277fd7e98fe3ed0f7521727d6216ac19f23c92e9f6d97147696462024a1cd5 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrRetToBufW
VerQueryValueW
GetDC
GetProcessImageFileNameW
VariantInit
FreeSid
_gcvt
RasEnumConnectionsW
WinHttpOpen
sqlite3_free
bind
Pie
WNetGetConnectionW
timeGetTime
InternetOpenW
PrintDlgW
ImageList_Add
SHGetMalloc
WJSOpen
OleDraw
GetIfEntry
NtDeleteFile
SetSuspendState
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE