TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
y4c1l01066ejk5s6
Static task
static1
Behavioral task
behavioral1
Sample
1.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1.dll
Resource
win10v2004-20240802-en
Target
1.dll
Size
24.2MB
MD5
bab802308f09fe74a448a04dbf742938
SHA1
ba0dc3d03b001a0b6b7f0437e6d01534dd0d947a
SHA256
9efd55e5678b0e2c419483939b7b11d9168bceeffe8cbe7d1f809b0ccd9c7fe3
SHA512
0b4997889894e71b2fd7d4a5d00991f64ada7c71f2ed98f05831255e4cd04144f7911410d53b89c533713d92bb4e7323eed96e59ecc07d4567053c026ee0326e
SSDEEP
393216:ApJwSi0umuCtK4KI8YxCYOMbvE9hMTz4KvdAF+m0zAIwmJ:mwSi0uiZ3OMbE92hdS+mp
Checks for missing Authenticode signature.
resource |
---|
1.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
InternetCloseHandle
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
y4c1l01066ejk5s6
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ