TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
xa39cl75t0nbf3qs8p60o6pt
Static task
static1
Behavioral task
behavioral1
Sample
f4040bd708f09dd09a8ecaa5b54ca072e4b2fa12ba1187a39984cc4d615850b7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4040bd708f09dd09a8ecaa5b54ca072e4b2fa12ba1187a39984cc4d615850b7.dll
Resource
win10v2004-20241007-en
Target
f4040bd708f09dd09a8ecaa5b54ca072e4b2fa12ba1187a39984cc4d615850b7.dll
Size
25.9MB
MD5
e8f30b8ddf4e09ecb0b5df56a3922fa4
SHA1
530462f044be9db5dfdb0d4224cedbf429f6fa96
SHA256
f4040bd708f09dd09a8ecaa5b54ca072e4b2fa12ba1187a39984cc4d615850b7
SHA512
b7c59dc9aa9462386ec868333dd63a533be398a50bbd530f8370112b7827a86493faa10944ef8344ff055af10b13294147aa03b86c0ab6b30794b0d2b02877b7
SSDEEP
393216:PyXwSi02jZmFISS9J8cwpaI1eAN5cKyd+:ywSi02mhpa2D5Cg
Checks for missing Authenticode signature.
resource |
---|
f4040bd708f09dd09a8ecaa5b54ca072e4b2fa12ba1187a39984cc4d615850b7.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
InternetCloseHandle
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
xa39cl75t0nbf3qs8p60o6pt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ