CheckMin
DumpHooker
FindHooker
GettingSomeActionOrWhat
SetMagic
Behavioral task
behavioral1
Sample
Hookers.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Hookers.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Minimize to tray.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Minimize to tray.exe
Resource
win10v2004-20231215-en
Target
0ce5aba8ab08ebd7ed6f9a941781fc0e
Size
11KB
MD5
0ce5aba8ab08ebd7ed6f9a941781fc0e
SHA1
9f9e4d9c04588dcf1d5bcadd34cab3e741884a50
SHA256
e4947d4610d95e1be8d8e6c9c79c98109a1d34fc28e015d6e6bdd771f7f7482e
SHA512
9b9f33832c513a66ecc78533d35bb3cf1bbf1d082b760b8cc1173034ca59aadab5e45faef6818ec23275ad7bcb82a1d405d71f95cf50064b935a8aadcdf1e957
SSDEEP
192:EEd+QtSW3reJ6/Xb9B3B6TAwFK0D0td1IBHlq09CfdYtLnDXt5:EO+QtqJI56lK0I4AdYtPt5
resource | yara_rule |
---|---|
static1/unpack001/Minimize to tray.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Hookers.dll |
unpack001/Minimize to tray.exe |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetAsyncKeyState
GetForegroundWindow
GetWindowLongA
PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
CheckMin
DumpHooker
FindHooker
GettingSomeActionOrWhat
SetMagic
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ