Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
563fe11da3369c1724cb6f2f23f1a3c9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
563fe11da3369c1724cb6f2f23f1a3c9.dll
Resource
win10v2004-20231222-en
Target
563fe11da3369c1724cb6f2f23f1a3c9
Size
13KB
MD5
563fe11da3369c1724cb6f2f23f1a3c9
SHA1
62087338b6835a5f08d3a8dfb4654f04893a3c97
SHA256
4db4b842f09feb06fd5c834f70197bda5a9e1d986626f3dac1515a03eeea30ea
SHA512
9847da4542c06ff0f7e8e3b5fd38eebdb9c20289fede2887348620a0d313c6398a7bc8482a397acea5244f58acbe13eb72d62b1e56a8962047bae5e0202c3c36
SSDEEP
192:amRZIhcvo0lbFnqCxDlpzxuJ85kWg+dL+d3EXrPK3BRwi/2:RzNvo6sCJlpzxuz+drjCci/2
Checks for missing Authenticode signature.
resource |
---|
563fe11da3369c1724cb6f2f23f1a3c9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
VirtualProtect
Sleep
lstrcmpA
lstrcatA
lstrcmpiA
lstrcpyA
ExitProcess
lstrlenA
GetTickCount
lstrcpynA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WritePrivateProfileStringA
GetTempPathA
ExpandEnvironmentStringsA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ