EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
00089f5265e25f3d83d9dfd7af4794b9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00089f5265e25f3d83d9dfd7af4794b9.dll
Resource
win10v2004-20231215-en
Target
00089f5265e25f3d83d9dfd7af4794b9.exe
Size
22KB
MD5
00089f5265e25f3d83d9dfd7af4794b9
SHA1
0a27fd1d6a085a518da732cc4915978d9abf940e
SHA256
b7f6492d45388e506a1156d1b419415c9ac45a06f10d11364e142efc56df8c1a
SHA512
74fe04fa3294f5775605e4854ad403eb02f339b0c4ad91c5bd57b0103cfbb2798585cd754edd73426f6a81d8fd3d0c0ee103a97226d294e8524f3878a126182a
SSDEEP
384:kPyZNjtU2mJVAbAp6TSWEel8VAEd4sIui1CjNMIz1ZMhP4nY:0yZidpOSW98V74sHOI1Z8B
Checks for missing Authenticode signature.
resource |
---|
00089f5265e25f3d83d9dfd7af4794b9.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ