TMethodImplementationIntercept
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
a4eaffeaa8d3e7d97e5f07910eaab89e6b2af55672590a2bebf23982c489aee7.exe
Resource
win7-20240903-en
Target
ca0779d9e66bc107c13c0479b9fed977.bin
Size
7.4MB
MD5
0b041674109485c3191acbef6f042863
SHA1
419b66db72ec2850acc094cd7ee019db488ea36d
SHA256
0786adf732ca54fe90225daf5745e329e18d6048cab72e15ccfe6f633fcd8860
SHA512
48a1e1322d4cf26f587478daec7ebe5f17360adf4a7e6ddf5c6d30039f6645f88031ab033a0862fe7dff2c662244b68ccfa48c68f388997c30305a8eaf337e1f
SSDEEP
196608:+Rm95FoUXjOGNESjgGWhqNXKAVI71akCxBftX:U0oQNEUpNXZIUkGR
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/a4eaffeaa8d3e7d97e5f07910eaab89e6b2af55672590a2bebf23982c489aee7.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
TMethodImplementationIntercept
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ