InstallGetkey
RemoveGetkey
Behavioral task
behavioral1
Sample
6ffbbff97a2bffaf1063db7842806846.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ffbbff97a2bffaf1063db7842806846.dll
Resource
win10v2004-20231215-en
Target
6ffbbff97a2bffaf1063db7842806846
Size
43KB
MD5
6ffbbff97a2bffaf1063db7842806846
SHA1
e600efc49df4417f208164c2614cd6600d391846
SHA256
3c043a0617c6b92b0901d4c93114d1b10045b7c91b82312e3f68ed86f841b8b6
SHA512
bf5edc0596661e4d6c217026f770ac2906b01face6c4079c6ee6b872757d15d7524634f780e7496f8b1d84bc63d7e41ff6210fcf15a6484dab3784ed5f93ac94
SSDEEP
384:hEuzqcg9pLsz0qiYVk119wG65UsvqkwbK:KuzqV9pLsz0hx1Dror
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ffbbff97a2bffaf1063db7842806846 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
CreateFileMappingA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
GetStartupInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
MessageBoxA
UnhookWindowsHookEx
TranslateMessage
SetWindowsHookExA
PostMessageA
PeekMessageA
DispatchMessageA
CallNextHookEx
InstallGetkey
RemoveGetkey
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE