AddMonitoredWnd
ClearKeyHook
ClearWndMonHook
RemoveMonitoredWnd
SetKeyHook
SetWndMonHook
Static task
static1
1 signatures
General
-
Target
11604463596.zip
-
Size
2KB
-
MD5
4654f8322d33865f7b137af2bbfaa419
-
SHA1
baad1d76029ca92137d8ad390c0fc6a27daf1fff
-
SHA256
f6a11023d62b147d91b381291af6fa271ed9e4ba4a93e64291574a4e062062ba
-
SHA512
eb78f620773767352afcb13b9813c0c4598c7eb5539e51486a5650133a7458e73bc91963dcf33d310e1c47907360506f6f9fb905e5075b641a31a63f22dda9c8
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b7e321cf9dacead275e600c2b531e96a62c671e0a2d641e141acbefb509adf2b
Files
-
11604463596.zip.zip
Password: infected
-
b7e321cf9dacead275e600c2b531e96a62c671e0a2d641e141acbefb509adf2b.dll windows x86
49849948d2ed03fbf446f60e30021204
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
user32
UnhookWindowsHookEx
MapVirtualKeyA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
PostMessageA
CallNextHookEx
SendMessageA
SetWindowsHookExA
RegisterWindowMessageA
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JOE Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ