_send_hook
a
Behavioral task
behavioral1
Sample
c023f97a3d368a2eb2b0d0744551ca3642e1b5d3e9cff52304a56faa24fb9839.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c023f97a3d368a2eb2b0d0744551ca3642e1b5d3e9cff52304a56faa24fb9839.dll
Resource
win10v2004-20231023-en
Target
c023f97a3d368a2eb2b0d0744551ca3642e1b5d3e9cff52304a56faa24fb9839
Size
1.9MB
MD5
cee6bc04be107525441116c1b7bc0e4c
SHA1
72bf0f244ef1e6d19ea77dfe4d93b40530be435d
SHA256
c023f97a3d368a2eb2b0d0744551ca3642e1b5d3e9cff52304a56faa24fb9839
SHA512
80fe5cf1879f97c0d5249e0f40a7654ad0ce5b055347ff09bb5d4bae56084565f23ccfce77dc39eff5852a20d83a846680a63ea9c5db0a30cb138f50d51fd83b
SSDEEP
49152:5s70lwk1WhI3zxFj6xJmIaMahFjIE1FRCRx7MzvEazj+H+1l/Ro9rp:+hI3zm/aPjP1/CTI6Hq7o91
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
c023f97a3d368a2eb2b0d0744551ca3642e1b5d3e9cff52304a56faa24fb9839 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
RaiseException
TerminateProcess
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetCommandLineA
TlsGetValue
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetVersionExA
GetPrivateProfileStringA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
GetProcessHeap
SetWaitableTimer
CreateWaitableTimerA
GetCurrentThreadId
CreateThread
MultiByteToWideChar
GetCurrentProcess
GetCurrentProcessId
CloseHandle
Module32First
CreateToolhelp32Snapshot
VirtualFreeEx
WideCharToMultiByte
lstrlenW
GetTickCount
GetOEMCP
GetCPInfo
RtlUnwind
SetFilePointer
WriteFile
GetProcessVersion
FindResourceA
LoadResource
LockResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
MulDiv
GetVersion
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
FlushFileBuffers
GetClientRect
IsWindow
AdjustWindowRectEx
ModifyMenuA
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
PostThreadMessageA
DestroyMenu
CreateDialogIndirectParamA
EndDialog
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
MsgWaitForMultipleObjects
SetForegroundWindow
SetActiveWindow
AttachThreadInput
SetWindowTextA
GetWindowTextA
EnumWindows
GetWindowTextW
GetWindowTextLengthW
GetClassNameA
GetParent
GetWindowThreadProcessId
IsWindowVisible
FindWindowExA
RegisterClassA
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
GetCursorPos
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
UnhookWindowsHookEx
UnregisterClassA
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
GetMenuItemCount
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegCreateKeyExA
LookupPrivilegeValueA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
AdjustTokenPrivileges
OpenProcessToken
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
WinHttpAddRequestHeaders
WinHttpCheckPlatform
WinHttpCrackUrl
WinHttpOpen
WinHttpSetTimeouts
WinHttpConnect
WinHttpOpenRequest
WinHttpSetCredentials
WinHttpCloseHandle
WinHttpSetOption
WinHttpQueryHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpReadData
htons
WSACleanup
inet_addr
closesocket
bind
listen
socket
WSAStartup
connect
send
recv
accept
GetDeviceCaps
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkColor
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap
GetStockObject
GetObjectA
DocumentPropertiesA
OpenPrinterA
ClosePrinter
ord17
ord8
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SysFreeString
VarR8FromCy
VarR8FromBool
VariantChangeType
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
VariantCopy
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
_send_hook
a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ