getActiveDesktop
getWnd
Static task
static1
Behavioral task
behavioral1
Sample
0489d984112cecdd4b1b91507d0957e94c716400f97c5a40f4530c623bee7ce3.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0489d984112cecdd4b1b91507d0957e94c716400f97c5a40f4530c623bee7ce3.dll
Resource
win10v2004-20240226-en
Target
0489d984112cecdd4b1b91507d0957e94c716400f97c5a40f4530c623bee7ce3
Size
17KB
MD5
51193d85fd2cdb9bbee2ed18197af863
SHA1
c92222ec110be4c643fac3a840a18bec7a7831a8
SHA256
0489d984112cecdd4b1b91507d0957e94c716400f97c5a40f4530c623bee7ce3
SHA512
3d65bc3c9715f924fc4184c7f81a17b576e29b4855562146b593ecbd5e6a817ae20528e17a10b6994974d2ab9ed389834ca1584706d0b933eab612f7ea386b63
SSDEEP
384:vbDeFhM9zNdju9I8RLzx7XrzBTRDWrGBJkJn/W/E/J/6WCVWua:vGMnM9TLt7XBUrGqnucxOza
Checks for missing Authenticode signature.
resource |
---|
0489d984112cecdd4b1b91507d0957e94c716400f97c5a40f4530c623bee7ce3 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
DisableThreadLibraryCalls
lstrcmpiW
CreateThread
WideCharToMultiByte
VirtualFreeEx
MultiByteToWideChar
lstrcmpiA
GetProcAddress
VirtualAllocEx
GetModuleHandleA
GetCurrentProcessId
lstrcmpA
VirtualFree
VirtualAlloc
GetModuleHandleW
GetModuleFileNameA
VirtualProtect
IsBadReadPtr
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
RtlFreeAnsiString
NtQueryInformationThread
NtClose
RtlUnicodeStringToAnsiString
NtOpenProcess
strstr
memset
memcpy
getActiveDesktop
getWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ