InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
afb43d0425eb202c4c4fd9388253a0b3098ef390c71a081f16a7f06139ae4ecf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afb43d0425eb202c4c4fd9388253a0b3098ef390c71a081f16a7f06139ae4ecf.dll
Resource
win10v2004-20220812-en
Target
afb43d0425eb202c4c4fd9388253a0b3098ef390c71a081f16a7f06139ae4ecf
Size
140KB
MD5
0553590b5706b391995a7ec2c44921c0
SHA1
4024a0dee3b6d298f0e8595dc15acd1a5cef1707
SHA256
afb43d0425eb202c4c4fd9388253a0b3098ef390c71a081f16a7f06139ae4ecf
SHA512
089a5cd6bdb53ad594a9bb0960bdb49124b68ccec43a566902a2daa19e4f97f8c9362b6d889b7abc3421fe30138db03edb6754bc5267c76415be4ed2d2b5eebc
SSDEEP
3072:dsgwEvM3z0BQg/S3jSEUl+Welmef2Aze001gCm6+T0IiI:dsge3wXCQefZCm6+N
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
UnhookWindowsHookEx
TranslateMessage
SetWindowsHookExA
SetWindowLongA
RegisterWindowMessageA
PostThreadMessageA
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
LoadStringA
IsWindowVisible
GetWindowThreadProcessId
GetWindowLongA
GetSystemMetrics
GetWindow
GetDesktopWindow
GetClassNameA
DispatchMessageA
CallWindowProcA
CallNextHookEx
CharNextA
CharToOemA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
UnmapViewOfFile
TerminateThread
SetFilePointer
SetEvent
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
OpenProcess
OpenFileMappingA
MoveFileA
MapViewOfFile
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetVersionExA
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibraryAndExitThread
FreeLibrary
FormatMessageA
FindFirstFileA
FindClose
EnumCalendarInfoA
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileA
DeleteCriticalSection
CreateProcessA
CreateFileMappingA
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ