FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLEventLock
WLEventLogoff
WLEventLogon
WLEventShutdown
WLEventStartScreenSaver
WLEventStartup
WLEventStopScreenSaver
WLEventUnlock
Static task
static1
Behavioral task
behavioral1
Sample
0bcfc3a436ecf007f17e80b0fa5195f9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bcfc3a436ecf007f17e80b0fa5195f9.dll
Resource
win10v2004-20231215-en
Target
0bcfc3a436ecf007f17e80b0fa5195f9
Size
10KB
MD5
0bcfc3a436ecf007f17e80b0fa5195f9
SHA1
9fce0d48478e47ae14229a2fe74aa60eff7aff87
SHA256
ca70b4ea11fb1f174d81f37ad8a5dc4f5dcc089f391d9842fe42f9e671b07f7d
SHA512
8283642b9e262bd7901c5e6793ba360ad57d29625fc56e111934773920df18f0cc4ea2132e0ec28406bae884df86b6515b7b4e5a487323d5841b717e96a212f4
SSDEEP
192:tD0VSIqTNOAyNamV3MrruxPq8hn+bbs6u:trIqolGryPqsqw6u
Checks for missing Authenticode signature.
resource |
---|
0bcfc3a436ecf007f17e80b0fa5195f9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_mbscmp
memcpy
fclose
fwrite
fopen
memset
_mbsnbcpy
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
time
localtime
strftime
strlen
strcpy
_mbsnbcmp
_mbsrchr
sprintf
WideCharToMultiByte
GetModuleFileNameA
DisableThreadLibraryCalls
SetFileAttributesA
CloseHandle
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyState
GetAsyncKeyState
CallNextHookEx
GetWindowTextA
CreateProcessAsUserA
FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLEventLock
WLEventLogoff
WLEventLogon
WLEventShutdown
WLEventStartScreenSaver
WLEventStartup
WLEventStopScreenSaver
WLEventUnlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ