SetHook1
��ʮ������_��
Static task
static1
Behavioral task
behavioral1
Sample
79b8fb07f52d6ccfcb3b59fd4e5d83a4a6d5df3bb5cc3b7e4445f86a2bbd8da1.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
79b8fb07f52d6ccfcb3b59fd4e5d83a4a6d5df3bb5cc3b7e4445f86a2bbd8da1.dll
Resource
win10v2004-20231130-en
Target
79b8fb07f52d6ccfcb3b59fd4e5d83a4a6d5df3bb5cc3b7e4445f86a2bbd8da1
Size
7.0MB
MD5
75c5a06a6d1403cf8fb2b7db24c6a84b
SHA1
dcdfa27814c3b422e8585a62f2b7122f704aab06
SHA256
79b8fb07f52d6ccfcb3b59fd4e5d83a4a6d5df3bb5cc3b7e4445f86a2bbd8da1
SHA512
4327024f4873fa397baf745257d202b4a15d5ffdd940131d282cabeaefef5b2475ba05407b33c36cb09233eb8188037d5365bc22abcf98537b271c751529054b
SSDEEP
98304:qDeDnHrGlLbLgcd3pdPFw5VBe01nsehRfVQDc2/jVgxihdMqk401EKszkQd0Ja36:qcriXLgoQA01152SAhd53MY7dhK
Checks for missing Authenticode signature.
resource |
---|
79b8fb07f52d6ccfcb3b59fd4e5d83a4a6d5df3bb5cc3b7e4445f86a2bbd8da1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetClipboardData
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
SetBkColor
midiStreamRestart
ClosePrinter
RegCreateKeyExA
ShellExecuteA
CLSIDFromString
SafeArrayPtrOfIndex
ImageList_SetBkColor
socket
GetSaveFileNameA
WTSSendMessageW
SetHook1
��ʮ������_��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ