?ClearHook@@YAXXZ
?EnableClickGlobal@@YAXHHH@Z
?EnableClickTray@@YAXHH@Z
?EnableWheelGlobal@@YAXHH@Z
?EnableWheelTray@@YAXH@Z
?InitTaskbar@@YAXXZ
?SetHook@@YAXPAUHWND__@@0@Z
?SetWheelTrayArea@@YAXH@Z
Static task
static1
Behavioral task
behavioral1
Sample
11e93b5ce7835fb8a69ec0f98828caa0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e93b5ce7835fb8a69ec0f98828caa0.dll
Resource
win10v2004-20231215-en
Target
11e93b5ce7835fb8a69ec0f98828caa0
Size
8KB
MD5
11e93b5ce7835fb8a69ec0f98828caa0
SHA1
5538cea0a1aed5426a0e7e26e66ffe6cba9da0dc
SHA256
c5773d87542b9e0ab138d483894fb69c5e524ea6a2609555f87d32f291bfd54b
SHA512
79c0abe91e928e583c838ee3c89534e5698968fdda95ebc2c6ae305c65a7b501a1e69339287314137fa3cd64592a0f4771973c65c4b339b32774f95738298bf2
SSDEEP
96:tAG0z/lPlNr092UYpAbpzw8Wt52WDxTCGeEQjIQOrj+kqvyU5S:8FlNr092U+Abe848arj9qqU5
Checks for missing Authenticode signature.
resource |
---|
11e93b5ce7835fb8a69ec0f98828caa0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
malloc
_XcptFilter
TerminateProcess
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
GetCurrentThreadId
Sleep
GetWindowRect
UnhookWindowsHookEx
SetWindowsHookExA
FindWindowA
FindWindowExA
CallNextHookEx
PostMessageA
GetKeyState
GetKeyboardState
PtInRect
SHAppBarMessage
?ClearHook@@YAXXZ
?EnableClickGlobal@@YAXHHH@Z
?EnableClickTray@@YAXHH@Z
?EnableWheelGlobal@@YAXHH@Z
?EnableWheelTray@@YAXH@Z
?InitTaskbar@@YAXXZ
?SetHook@@YAXPAUHWND__@@0@Z
?SetWheelTrayArea@@YAXH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ