InstallHook
MouseProc
UninstallHook
Behavioral task
behavioral1
Sample
Password Revealer 1.0/revealer.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Password Revealer 1.0/revealer.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Password Revealer 1.0/revealer.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Password Revealer 1.0/revealer.exe
Resource
win10v2004-20231215-en
Target
11db8bf15c48c5b513a02117e89b445c
Size
5KB
MD5
11db8bf15c48c5b513a02117e89b445c
SHA1
82d0c2a2f1d4c55d740e416493032bdd32fc9a56
SHA256
7ccc114255ba0bec5a619fc5476a4b9598018474f5c0f64661e4cc104adc4032
SHA512
2243fa91d9a9bc535f7d877900fb864ae6ca450d2fc8b37465797096ec20c96dec7f181cf559c57036f3e7f99ca8f3b0b0ae973996736f76410eefef9209768a
SSDEEP
96:eIP0q5Fv0J/ZTjLMBHv8jQEAvlLdCisXWdiTlCk1C0VOg9SDGaVSb1:fcIe/ZTX8Hv8jfClLB0mLk19VJMGaVe
resource | yara_rule |
---|---|
static1/unpack001/Password Revealer 1.0/revealer.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Password Revealer 1.0/revealer.dll |
unpack001/Password Revealer 1.0/revealer.exe |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowLongA
InvalidateRect
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
WindowFromPoint
CallNextHookEx
InstallHook
MouseProc
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ