ghi_HookOff
ghi_HookOn
Behavioral task
behavioral1
Sample
c41fa8c5d85ba5b697921117143d9d9fd8d991545b1f31b56dc1b4c114fa6fd1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c41fa8c5d85ba5b697921117143d9d9fd8d991545b1f31b56dc1b4c114fa6fd1.dll
Resource
win10v2004-20221111-en
Target
c41fa8c5d85ba5b697921117143d9d9fd8d991545b1f31b56dc1b4c114fa6fd1
Size
34KB
MD5
c4069430192cae4ddc2aee5c325cfbe8
SHA1
31fb5fc826df0a6a485360b270fefb84be9b0770
SHA256
c41fa8c5d85ba5b697921117143d9d9fd8d991545b1f31b56dc1b4c114fa6fd1
SHA512
58aec76be2a44b8942fcdd15708bef4815811634ec5ee0ac54a332fec8fc0aadef220d8ab30dca3e641fd89ee79535cbe3426b2789924df70ebf5335df037f09
SSDEEP
96:nPl2xDItAH5kwtO2x8sZSUiDGz8l91aPqI0R4cnu+L07gmKjcUd:n0xDItAH6076uteIqI0R4cn3I74jcUd
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
LocalFree
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
PostMessageA
CallNextHookEx
ghi_HookOff
ghi_HookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE