InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
54a747b3afb6e68cf0c0e0b9f6df9da21c3b27183f95a472d19f21cf1ab64f1d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
54a747b3afb6e68cf0c0e0b9f6df9da21c3b27183f95a472d19f21cf1ab64f1d.dll
Resource
win10v2004-20221111-en
Target
54a747b3afb6e68cf0c0e0b9f6df9da21c3b27183f95a472d19f21cf1ab64f1d
Size
140KB
MD5
0873c63359b0e1c002b0d0cc1b917951
SHA1
a99f5a30e70362cb552b65e1d2a6ffb80123ba26
SHA256
54a747b3afb6e68cf0c0e0b9f6df9da21c3b27183f95a472d19f21cf1ab64f1d
SHA512
fd2fe0f9a8ae2ac0f9aecb951fae1d75192fb4728f029c8a2caf461547dddf72e860b2e059083d19cc5316ec405976e4824e2cc8764a0e029a4ae8dddf6f937e
SSDEEP
3072:NsgwEvM3z0BQg/S3jSEUl+Welmef2Aze001gCm6+50Iiz:Nsge3wXCQefZCm6+0
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
UnhookWindowsHookEx
TranslateMessage
SetWindowsHookExA
SetWindowLongA
RegisterWindowMessageA
PostThreadMessageA
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
LoadStringA
IsWindowVisible
GetWindowThreadProcessId
GetWindowLongA
GetSystemMetrics
GetWindow
GetDesktopWindow
GetClassNameA
DispatchMessageA
CallWindowProcA
CallNextHookEx
CharNextA
CharToOemA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
UnmapViewOfFile
TerminateThread
SetFilePointer
SetEvent
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
OpenProcess
OpenFileMappingA
MoveFileA
MapViewOfFile
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetVersionExA
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibraryAndExitThread
FreeLibrary
FormatMessageA
FindFirstFileA
FindClose
EnumCalendarInfoA
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileA
DeleteCriticalSection
CreateProcessA
CreateFileMappingA
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ