__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
Run it as Administrator.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Run it as Administrator.exe
Resource
win10v2004-20240802-en
Target
Run it as Administrator.exe
Size
154KB
MD5
450b04acd5335344bba076ef4ee2ebaa
SHA1
4f26abe9cb2886567b88e3d5ee0149f039d3bfda
SHA256
846c474d466f8a8cbd113d06b00ab7221e1ba92d3b7253f5dea4b7fb7d71c79c
SHA512
749cabf26315d455013c3fd11bf055972e8ea3382df1665632c1e02493ea418a3ab233c1c40b902d6a39432a25023e31690403ec145a3fd3d4b0900fcdaa3c28
SSDEEP
1536:JDe0EMBqrZg7E1RjPuJrj5MfWVuMX1bRMUi5vJG2llt8OESMafevxW8brXReaBvt:FZ9e1d8j6+bXdmIxDrhh468M
Checks for missing Authenticode signature.
resource |
---|
Run it as Administrator.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileType
EnterCriticalSection
GetACP
SetFilePointer
LocalFree
CloseHandle
GetTickCount
VirtualFree
GetFileSize
GetStartupInfoW
ExitProcess
InitializeCriticalSection
VirtualAlloc
WriteProcessMemory
RtlUnwind
GetCPInfo
GetSystemInfo
GetCommandLineW
ResumeThread
GetProcAddress
LeaveCriticalSection
EnumSystemLocalesW
VirtualAllocEx
GetStdHandle
GetVersionExW
VerifyVersionInfoW
GetModuleHandleW
FreeLibrary
ReadFile
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
GetUserDefaultUILanguage
FindFirstFileW
CreateProcessW
GetConsoleOutputCP
CreateRemoteThread
GetConsoleCP
SetLastError
GetModuleFileNameW
GetLastError
lstrlenW
CompareStringW
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
FindClose
LoadLibraryA
ResetEvent
SetEvent
GetLocaleInfoW
CreateFileW
GetVersion
RaiseException
IsDBCSLeadByteEx
FormatMessageW
SwitchToThread
GetLocalTime
WaitForSingleObject
WriteFile
DeleteCriticalSection
TlsGetValue
IsValidLocale
TlsSetValue
VirtualFreeEx
LoadLibraryExW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
CreateEventW
GetThreadLocale
Sleep
SetThreadLocale
CharUpperBuffW
CharNextW
CharLowerBuffW
LoadStringW
CharUpperW
GetSystemMetrics
MessageBoxW
SysAllocStringLen
SysFreeString
SysReAllocStringLen
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ