UnHook
WSPStartup
installhook
Static task
static1
Behavioral task
behavioral1
Sample
2a23d7724d22053654933382f81d2d9e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a23d7724d22053654933382f81d2d9e.dll
Resource
win10v2004-20231215-en
Target
2a23d7724d22053654933382f81d2d9e
Size
132KB
MD5
2a23d7724d22053654933382f81d2d9e
SHA1
ef474e1b04d56b4280580b6bfa52864822ca4542
SHA256
e7ed50be4bea2994e18b1f9f643d4836544674fae3ad4d5324c9e70da389e60a
SHA512
68a4b9d54119424eb418fad00f62722c2fbe28b199ddbce096f3af4f7f436b84e2ec782d4a897cfeb5a1c20335348ce30ea9a3b50086eb09453763fea7760b6f
SSDEEP
1536:3GCDSnZm7ed3e2cnTc2vo8VpNh5HnEVco0ldU1QdstPsvYM9iT/B5Ae+nYTr7lh2:3buZBd3e2cAMz3hnBpLQwUPTr7lrLs
Checks for missing Authenticode signature.
resource |
---|
2a23d7724d22053654933382f81d2d9e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetCurrentDirectoryA
GetCurrentDirectoryA
CloseHandle
GetFileSize
CreateFileA
MoveFileA
SetFileTime
GetFileTime
GetFileAttributesA
SetFileAttributesA
CopyFileA
OutputDebugStringA
WriteFile
GetEnvironmentVariableA
ReadFile
SetFilePointer
GetLocalTime
TerminateThread
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetModuleFileNameA
WaitForSingleObject
GetLastError
CreateMutexA
GetSystemDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetVersion
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
CreateProcessA
GetStartupInfoA
DeleteFileA
MoveFileExA
SystemTimeToFileTime
GetProcAddress
GetTempPathA
GetVolumeInformationA
ReleaseMutex
ExpandEnvironmentStringsW
lstrcpyA
CompareStringW
CompareStringA
SetEndOfFile
lstrcmpiA
VirtualQuery
VirtualProtect
FreeLibrary
GetCurrentProcess
WriteProcessMemory
GetWindowsDirectoryA
FindFirstFileA
FindClose
GetComputerNameA
GetVersionExA
GetLogicalDrives
GetDriveTypeA
IsBadCodePtr
SetEnvironmentVariableA
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
GetFullPathNameA
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
HeapSize
TerminateProcess
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetDiskFreeSpaceExA
GetACP
CreateThread
GetTempFileNameA
Sleep
GetTimeZoneInformation
GetSystemTime
HeapAlloc
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
DeleteCriticalSection
ExitProcess
GetCurrentThreadId
ToAscii
GetKeyboardState
UnhookWindowsHookEx
GetForegroundWindow
GetKeyboardLayout
GetWindowTextA
CallNextHookEx
wsprintfA
SetWindowsHookExA
ControlService
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
OpenSCManagerA
OpenServiceA
ChangeServiceConfigA
RegCloseKey
CreateServiceA
StartServiceA
CloseServiceHandle
RegEnumKeyExA
ShellExecuteA
getsockname
WSAStartup
WSACleanup
recv
select
send
inet_ntoa
connect
shutdown
closesocket
htonl
htons
ntohl
WSCEnumProtocols
gethostbyname
WSCDeinstallProvider
WSCWriteProviderOrder
WSCInstallProvider
ntohs
getsockopt
getpeername
WSCGetProviderPath
inet_addr
socket
ImmReleaseContext
ImmGetCompositionStringA
ImmGetDescriptionA
ImmGetContext
UnHook
WSPStartup
installhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ