?DelHook@@YGHXZ
?SetHook@@YGHXZ
Static task
static1
Behavioral task
behavioral1
Sample
084848a06cfe17e70d94c9140f0e2044.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
084848a06cfe17e70d94c9140f0e2044.dll
Resource
win10v2004-20231215-en
Target
084848a06cfe17e70d94c9140f0e2044
Size
13KB
MD5
084848a06cfe17e70d94c9140f0e2044
SHA1
ad5543670ed1c42b72d3585236e3f431fc8a5e3e
SHA256
b8939d2386bea8a4c11a300fb8b7e9a96d41ac4bd8b0619a3a345d983704591c
SHA512
cc1008e7716ac5b3996ac318f1474934b65f3455804b3e546b1a07669227fd07f81b9f81468235d8a021c6259fc01a274a05e180618a8cbff9fec9051f619e6f
SSDEEP
192:S10YknFuz34HZ8qhZ5VQE8Dg4BWDkUBtWeel6gTpWJ3HpynlPt3a:SVkFE3YvhZvtUXUHWecTpWtHpylP
Checks for missing Authenticode signature.
resource |
---|
084848a06cfe17e70d94c9140f0e2044 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ord5302
??1type_info@@UAE@XZ
CallNextHookEx
CoInitialize
VariantClear
URLDownloadToFileA
?DelHook@@YGHXZ
?SetHook@@YGHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE