GetMsgProc
HideProcess
InstallGetMsgHook
UnHideProcess
UnInstallGetMsgHook
Static task
static1
Behavioral task
behavioral1
Sample
60e53352c94d2c3968eed0bae7950f4d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
60e53352c94d2c3968eed0bae7950f4d.dll
Resource
win10v2004-20231215-en
Target
60e53352c94d2c3968eed0bae7950f4d
Size
52KB
MD5
60e53352c94d2c3968eed0bae7950f4d
SHA1
cb2047fb15babfe832f88b107ebf7ce23867485d
SHA256
81729e843d4319b3dabdbd22cd2f07fb51f7a0078f8d590a4be0b2113470cb34
SHA512
58175aa1f0c32539dbb43d979c2e4bafb0785ebe51b26641c03e809a3ed3dafa4d01f4e3d3c2a8fe1d3bda1bc0d1483a3ed3dc97e3ddee27f4dc2b79f39c7238
SSDEEP
768:DJ/PBzXjTGhOmWb0JmAdB2E8Roxm9dMl:DlZjTGw0JmoLA0l
Checks for missing Authenticode signature.
resource |
---|
60e53352c94d2c3968eed0bae7950f4d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetCommandLineW
OpenProcess
GetCurrentProcessId
GetVersionExA
WriteProcessMemory
VirtualProtect
lstrcmpiA
FreeLibrary
LoadLibraryA
LCMapStringW
LCMapStringA
InterlockedDecrement
InterlockedIncrement
GetLastError
WideCharToMultiByte
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
CommandLineToArgvW
GetMsgProc
HideProcess
InstallGetMsgHook
UnHideProcess
UnInstallGetMsgHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ