StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
16e2c33682c766373b305ecba292c39c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16e2c33682c766373b305ecba292c39c.dll
Resource
win10v2004-20231215-en
Target
16e2c33682c766373b305ecba292c39c
Size
257KB
MD5
16e2c33682c766373b305ecba292c39c
SHA1
33aa3486dc598cd259447a82299a7fd990aaa1ca
SHA256
8f7484f65365bd062a6f883a4aa1b07c39c5188cf8d10ad543c5f0b529065c67
SHA512
e510e9bb1865d22cea88e9f3f69b24298ea5d9bd587193b2dba161821c19ad4bc07bd18552546db77ab7ea641c60c888a6f2f32daff2c9649a24b40a0c15d380
SSDEEP
3072:Kb5ZQHUOx7Gbr+NWPBXUf731uVqOEiCEpGUY:KovlGXHB0b1uNtCE4UY
Checks for missing Authenticode signature.
resource |
---|
16e2c33682c766373b305ecba292c39c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE