TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
6333341dc4dd4e4cb31757f4de21db2843bf00f92f1f4864e396e53acfc9985b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6333341dc4dd4e4cb31757f4de21db2843bf00f92f1f4864e396e53acfc9985b.exe
Resource
win10v2004-20241007-en
Target
6333341dc4dd4e4cb31757f4de21db2843bf00f92f1f4864e396e53acfc9985b.exe
Size
21.6MB
MD5
199647d0bbde7c3dfb86fa0834b5041d
SHA1
24bd21591567faab79ab733cfbfaad3ed5fe4b26
SHA256
6333341dc4dd4e4cb31757f4de21db2843bf00f92f1f4864e396e53acfc9985b
SHA512
59e6b4ce2c9a3c264b3c7d21627cb56c724811fc085fd2e3fc9e1244eb43d902189cb90ac08fed7a4d28e8569fbb2ac31a9533374cbec6e6d00b48ec0deea486
SSDEEP
49152:kQX/fA2EDj9wSs+0zbNxJuXeqxhRSzWWuL/U+XLWHLxMTgTF:kCsDC4XeqQNuzLWHLx
Checks for missing Authenticode signature.
resource |
---|
6333341dc4dd4e4cb31757f4de21db2843bf00f92f1f4864e396e53acfc9985b.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ