EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
000008298fc27014ecf5610f163277e2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
000008298fc27014ecf5610f163277e2.dll
Resource
win10v2004-20231215-en
Target
000008298fc27014ecf5610f163277e2.exe
Size
22KB
MD5
000008298fc27014ecf5610f163277e2
SHA1
e335abff5335e65d1fd3722301e1a39d2b694730
SHA256
328e96b6138d2968d8137ad33448802d74814fc3460254c76e7510152e0a7411
SHA512
7114b2748427f44dcc1080656ec598e8d4e777fca6dc9bb924d2ec60d94a8b61313ebfef113218762ba11e29293d17af45a32117c36b0bbf13092f54f67b1273
SSDEEP
384:5PyZNjtU2mCwZTTotUDM9F46ckL1YbXA+dYLZMUV3jMOtqG2EdFz8WqkhHOo3+jm:RyZL+foUicA10XA+dYLVTMOtqE3+joEY
Checks for missing Authenticode signature.
resource |
---|
000008298fc27014ecf5610f163277e2.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ