SetINVHook
SetKLHook
UnSetINVHook
UnSetKLHook
Static task
static1
Behavioral task
behavioral1
Sample
01c5b3c7c2d9e0ac04f6c37a4f5796ed.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01c5b3c7c2d9e0ac04f6c37a4f5796ed.dll
Resource
win10v2004-20231215-en
Target
01c5b3c7c2d9e0ac04f6c37a4f5796ed
Size
52KB
MD5
01c5b3c7c2d9e0ac04f6c37a4f5796ed
SHA1
d8ce2f610966333af1bfb5b64b2afc0dfe17f2f2
SHA256
5fa7d9e4297f9d5c9ca3e77c2046cbd6daf9e1f3c0be0b5f5d78c14938a7d236
SHA512
93775865c47c2571be7519d7cfa003bf1e67cba2ff5de4c8f2d981f236e9a3a01adc9417e5a732eeb07d2a66caf5523a0c118003c3e0a695656817fd752ec0ec
SSDEEP
768:7TislnKPuiY42bb5KIs4AsWMExU3dLwjVH3mR+/WsTb7fSA:yKK2a2bIIs4bExUtLw5Xv/j7
Checks for missing Authenticode signature.
resource |
---|
01c5b3c7c2d9e0ac04f6c37a4f5796ed |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
VirtualQuery
GetModuleHandleA
GetSystemInfo
WideCharToMultiByte
SetThreadPriority
GetCurrentThread
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcAddress
RtlUnwind
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
HeapReAlloc
HeapAlloc
ExitProcess
TerminateProcess
HeapSize
HeapFree
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
PostMessageA
ImageDirectoryEntryToData
SetINVHook
SetKLHook
UnSetINVHook
UnSetKLHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ