UnHook
WSPStartup
installhook
Static task
static1
Behavioral task
behavioral1
Sample
9616379c293f12b6ca23b01ebcb28835.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9616379c293f12b6ca23b01ebcb28835.dll
Resource
win10v2004-20231222-en
Target
9616379c293f12b6ca23b01ebcb28835
Size
120KB
MD5
9616379c293f12b6ca23b01ebcb28835
SHA1
f9c0903e406b7c72da5a4cc3b12f6092875de977
SHA256
2a4c3795cbcf5e4fdd0ee9196272721fa5977db46e238e4ec8393be97ff7f5a9
SHA512
7877cfd68071fe33b17cc935a4133165f4fdcd9dfa27c6e6b3315cb20a5f8defa4b823ad403343c0458c3b6e08f8b19e7f3847176a669987f0d987d1ba499fa5
SSDEEP
1536:BTptDuOCjQy8UfomvLKW9D34oFidkasoEMyTsqRiz8+mMVyLecEtApTI:BTptM57gm2W9MDdhsRiaysecEt
Checks for missing Authenticode signature.
resource |
---|
9616379c293f12b6ca23b01ebcb28835 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetFileTime
GetFileAttributesA
SetFileAttributesA
CopyFileA
WriteFile
GetEnvironmentVariableA
ReadFile
SetFilePointer
GetProcAddress
GetLocalTime
TerminateThread
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
OutputDebugStringA
GetModuleFileNameA
WaitForSingleObject
GetLastError
CreateMutexA
MoveFileA
SetFileTime
LockResource
SizeofResource
LoadResource
FindResourceA
GetVersion
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateProcessA
GetStartupInfoA
DeleteFileA
MoveFileExA
FreeLibrary
LoadLibraryA
SystemTimeToFileTime
CreateDirectoryA
GetTempFileNameA
GetTempPathA
GetVolumeInformationA
ReleaseMutex
ExpandEnvironmentStringsW
lstrcpyA
GetFileSize
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetComputerNameA
GetVersionExA
GetLogicalDrives
GetDriveTypeA
GetDiskFreeSpaceExA
CreateThread
GetWindowsDirectoryA
GetSystemDirectoryA
SetEnvironmentVariableA
TlsAlloc
InterlockedDecrement
VirtualAlloc
InterlockedIncrement
GetTimeZoneInformation
FreeEnvironmentStringsA
CompareStringA
CompareStringW
Sleep
SetEndOfFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetModuleHandleA
GetEnvironmentStringsW
TlsFree
GetSystemTime
RtlUnwind
GetEnvironmentStrings
SetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
FreeEnvironmentStringsW
HeapAlloc
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
DeleteCriticalSection
GetFullPathNameA
SetHandleCount
GetStdHandle
GetFileType
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ToAscii
GetKeyboardState
GetKeyboardLayout
GetWindowTextA
ControlService
CreateServiceA
StartServiceA
CloseServiceHandle
RegEnumKeyExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
ShellExecuteA
WSACleanup
WSCGetProviderPath
WSCInstallProvider
WSCWriteProviderOrder
WSCDeinstallProvider
gethostbyname
WSCEnumProtocols
ntohl
inet_ntoa
getsockname
WSAStartup
recv
select
send
inet_addr
connect
shutdown
closesocket
socket
htons
htonl
ImmGetDescriptionA
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
UnHook
WSPStartup
installhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ