EnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
56f5599e51c38c3b6c737c76371eae690161ece9d86ac6f1dfda29a3f6f5495f.dll
Resource
win7-20221111-en
General
-
Target
56f5599e51c38c3b6c737c76371eae690161ece9d86ac6f1dfda29a3f6f5495f
-
Size
522KB
-
MD5
0d01543c3c3a458c350c1d0d30f76020
-
SHA1
143dbe8a681477ebbd531182dc8539f5e0ad1afe
-
SHA256
56f5599e51c38c3b6c737c76371eae690161ece9d86ac6f1dfda29a3f6f5495f
-
SHA512
67e24b287c7bc5d5b40fc80c9e0bff0cde9449212af15b63859396e78e22037f5ddaefc70c75cd7f8b39c0250bacafeafa55ce0445f8bf75ef3cbad878182e16
-
SSDEEP
384:EpdNjtU2OEunQA7poj9cQfSWMm9pi4NTHsWItqGpzMAW/wko03ynnnnnnnnnnnnC:EpdqnLMKChjTHsWItr8/wkD7j
Malware Config
Signatures
Files
-
56f5599e51c38c3b6c737c76371eae690161ece9d86ac6f1dfda29a3f6f5495f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ