EnHookWindow
S45pFireWf4l
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0111d2d13a8007ed0f64c23e85edaa62.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0111d2d13a8007ed0f64c23e85edaa62.dll
Resource
win10v2004-20231215-en
Target
0111d2d13a8007ed0f64c23e85edaa62
Size
2.0MB
MD5
0111d2d13a8007ed0f64c23e85edaa62
SHA1
71c1e2e2ff4804dfea987d09ff3d10a23b7d6514
SHA256
6cffececd97bda0173464f986adf0971d3357cc2e6ee0b0bd4dcc15a64af882a
SHA512
ea47d5543f9438e2a881cf6cd931adb35b5f3b3049c9a38a4cec21cff43f3f4b5be9bbf27d2141d821b3643443c372296e67b89c12721e927c3a2bc2fc2b1f8a
SSDEEP
384:qidD9d6GAmOAxbczGz45vemvCKV79jiKYEuytzEl+VU57ttA:r6iv81V7JiKMoEl+F
Checks for missing Authenticode signature.
resource |
---|
0111d2d13a8007ed0f64c23e85edaa62 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
S45pFireWf4l
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ