EnAHookAWindow
Static task
static1
Behavioral task
behavioral1
Sample
a9b3aa5d96e3e3069c38d58a30c47476a32c2b2edcbdfc3e4113840fc214cd42.dll
Resource
win7-20220812-en
General
-
Target
a9b3aa5d96e3e3069c38d58a30c47476a32c2b2edcbdfc3e4113840fc214cd42
-
Size
523KB
-
MD5
dff6bfd606887c2d58d9397e6aeca050
-
SHA1
e3f152cd0c3102d816aa7d4e258539b536e48451
-
SHA256
a9b3aa5d96e3e3069c38d58a30c47476a32c2b2edcbdfc3e4113840fc214cd42
-
SHA512
75d582a0f49dd69883596856576a53cd0556b9ef72219d08cba7d97da73c9905a704491d78af9043a48d0ad4e008de731662ebbe137ae6ca1730ab4f27a828d5
-
SSDEEP
384:3qVNjtU2+3inzCh3h+G/d077jSJABzK/4O5Xoh5zBV/kV/QDtSmb:6VAuqPd0XYJwCo/BV/kpQ1
Malware Config
Signatures
Files
-
a9b3aa5d96e3e3069c38d58a30c47476a32c2b2edcbdfc3e4113840fc214cd42.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ