EnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
420665ed0d18518b82e1c9360417e9af.dll
Resource
win7-20231215-en
General
-
Target
420665ed0d18518b82e1c9360417e9af
-
Size
524KB
-
MD5
420665ed0d18518b82e1c9360417e9af
-
SHA1
99ed17c07b7f46aa3948962475f98779d08e9280
-
SHA256
fe3a34feed85386d520a7b0e2cc5097ef57e38c62cccf93565dba21146b8f754
-
SHA512
c9202013f4e39b803639463387278083a1279c9a9ab01f8eb65ce370cd0f482f7d3bdbf71a1379417e261cda3e6af04719c1fa2f99fd28d4c54068682d191b6d
-
SSDEEP
384:IqyVlNjtU2es12GVbp1c6JfCtVN0tjJLBxnc8W7+0kgU5zmsv6kQpU1l5:eVlh2I86JKtVNsLBONwgurv6kaU1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420665ed0d18518b82e1c9360417e9af
Files
-
420665ed0d18518b82e1c9360417e9af.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ