createProcessIS
getAttachThreadInputId
keyboardDeinitializer
keyboardInitializer
keyboardIsInitiated
keyboardProcedure
messageDeinitializer
messageInitializer
messageIsInitiated
messageProcedure
setAttachThreadInputId
Static task
static1
Behavioral task
behavioral1
Sample
bd3364373ffcb52f7cb9e6f62737eb4a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd3364373ffcb52f7cb9e6f62737eb4a.dll
Resource
win10v2004-20240226-en
Target
bd3364373ffcb52f7cb9e6f62737eb4a
Size
252KB
MD5
bd3364373ffcb52f7cb9e6f62737eb4a
SHA1
977a80b837dd8c6d24b780ba0801d1c2a128e6ce
SHA256
87f0aa3c3c8849089a84335aacdd6acc5aa7bec966a923e1ce68341ffa478c10
SHA512
8a495204e2f6abeeee6e1031c6f4f66a0c8ac90a0cf57c5b5597be6b0bc3b5bc96a6a66541e2d42bccd3668a68ed3f7ab20f491c781f19a2defbe1dd929201fa
SSDEEP
6144:7aXWF/NaABZ6p63SmNsGyAcHjGmSmjb3P5G5tG4+:GXWNMmc6CmNW5jGmvb3P5G3G
Checks for missing Authenticode signature.
resource |
---|
bd3364373ffcb52f7cb9e6f62737eb4a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetStdHandle
GetCommandLineA
CloseHandle
CreateProcessA
GetVersionExA
GetCurrentProcess
Sleep
CreateFileA
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetLastError
MultiByteToWideChar
GetModuleHandleA
WriteProcessMemory
lstrcmpiA
GetLastError
VirtualProtectEx
VirtualQueryEx
LocalFree
FormatMessageA
GetCurrentThreadId
DisableThreadLibraryCalls
SetEndOfFile
GetLocaleInfoW
GetOEMCP
GetACP
ReadFile
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
FreeEnvironmentStringsA
FlushFileBuffers
SetFilePointer
WriteFile
GetStartupInfoA
SetHandleCount
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RtlUnwind
RaiseException
SetStdHandle
GetFileType
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
HeapSize
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
CallNextHookEx
AttachThreadInput
PostMessageA
createProcessIS
getAttachThreadInputId
keyboardDeinitializer
keyboardInitializer
keyboardIsInitiated
keyboardProcedure
messageDeinitializer
messageInitializer
messageIsInitiated
messageProcedure
setAttachThreadInputId
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ