EnableIdleHook
EnableKeyboardHook
GetLastActiveTime
Behavioral task
behavioral1
Sample
EyeGuard.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
EyeGuard.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
EyeGuardHook.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
EyeGuardHook.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
非常世纪资源网.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
非常世纪资源网.url
Resource
win10v2004-20231215-en
Target
749f91470c79a549ef8c61eac5446738
Size
30KB
MD5
749f91470c79a549ef8c61eac5446738
SHA1
5f3a4192e4a615b69f3ce0eb4759e3377b1f3e6c
SHA256
a75ea5f6efeb267bd3928fa665007eaba15e710a12db4926fceea5e42c3d85d2
SHA512
c769745760d01edf515a48eea7283bded8c3a5f522b6f83e5b48ec9bd9196b01fa4eba5fb76977bbfd251ceac81b338b027f6020ecc13daa08f206edc3b2278f
SSDEEP
768:1Hv/ignpRkAi6DCPxF7PtwvQWuQwxPh0W4Kagk8xscYyZZ2WHwI:1Hv/ignXkR6DOFa85xZ0W4Hqxsf+Z2Wp
resource | yara_rule |
---|---|
static1/unpack001/EyeGuard.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/EyeGuard.exe |
unpack002/out.upx |
unpack001/EyeGuardHook.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
free
_initterm
CloseHandle
GetLocalTime
EnableWindow
FindWindowA
SetWindowsHookExA
SystemParametersInfoA
ShowWindow
UnhookWindowsHookEx
MessageBeep
CallNextHookEx
GetAsyncKeyState
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
EnableIdleHook
EnableKeyboardHook
GetLastActiveTime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ