TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
8ecab0ec5b748b901be5944797894eecd596788fee52f875a7dcd938abcb8356.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ecab0ec5b748b901be5944797894eecd596788fee52f875a7dcd938abcb8356.exe
Resource
win10v2004-20240802-en
Target
8ecab0ec5b748b901be5944797894eecd596788fee52f875a7dcd938abcb8356
Size
4.0MB
MD5
c23c86adbac8e9dde2340ffe5eab21ce
SHA1
fecea684fed4b0221af05aa2821ae0eeda920240
SHA256
8ecab0ec5b748b901be5944797894eecd596788fee52f875a7dcd938abcb8356
SHA512
20a4fefe7b5f783e27b6a35475067998244a3be4c889cbea043b63f0eaef3053835ff152331ff3bf45b53abefe250a3be797b3079f533802e551b976339d6b00
SSDEEP
98304:eYSQKYOF8Tlxsn+jSeWC5cIYl9BtLTzTAwNluJLLNinUWqyeM:1KYOuDU+j75cIYlXZTzkyluJLLW/eM
Checks for missing Authenticode signature.
resource |
---|
8ecab0ec5b748b901be5944797894eecd596788fee52f875a7dcd938abcb8356 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrRetToBufW
VerQueryValueW
GetDC
GetProcessImageFileNameW
VariantInit
FreeSid
_gcvt
RasEnumConnectionsW
WinHttpOpen
sqlite3_free
bind
Pie
WNetGetConnectionW
timeGetTime
InternetOpenW
PrintDlgW
ImageList_Add
SHGetMalloc
WJSOpen
OleDraw
GetAdaptersInfo
NtDeleteFile
SetSuspendState
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE