Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
95ef73d626e4daa8b611bf6d7acf8425.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
95ef73d626e4daa8b611bf6d7acf8425.dll
Resource
win10v2004-20231215-en
Target
95ef73d626e4daa8b611bf6d7acf8425
Size
14KB
MD5
95ef73d626e4daa8b611bf6d7acf8425
SHA1
345c8900f73151eb6b80d9df2150a81bd21c0628
SHA256
1ac9d1d5330485a9940ec837d23520105b7fa961e183818e2df8f4d5d07bd7e4
SHA512
ceded6cc426299dab48a4b39b6ccecce4bc5952711d096f81524c44e56f1116bce374835674979f4518577b3bc6aa664686353c4c65143377285796f15922a88
SSDEEP
192:HjnYAdPA8YLv5veMiJQq8nJMB4/CTwWnxviTLDcLGsYdJgySlZR1yBN:HjzMh2MsYCBD6TLQasYXgySHyv
Checks for missing Authenticode signature.
resource |
---|
95ef73d626e4daa8b611bf6d7acf8425 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
lstrcatA
lstrlenA
GetTickCount
lstrcpynA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WritePrivateProfileStringA
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
Sleep
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcmpiA
ExitProcess
lstrcmpA
IsBadReadPtr
VirtualProtect
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ