@@Jshj@Finalize
@@Jshj@Initialize
Hook_KB
UnHook_KB
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
c70b20f201c284f61913308d35db5d17.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c70b20f201c284f61913308d35db5d17.dll
Resource
win10v2004-20240226-en
Target
c70b20f201c284f61913308d35db5d17
Size
63KB
MD5
c70b20f201c284f61913308d35db5d17
SHA1
37941c7df20c6d69193fea6e5165f99dc605179d
SHA256
dcd37cc4b182fb08ee1bd0040e8770461eddf53f0496ade65d8102f67dfe6f51
SHA512
679456b6795939ccf7ea8edd0dd6b5956be6ab3096eabcaa9aa14f092f6f7fb2abe526ec999b11c0f65fdaf5c7373d5cd6e406ae6693786fe03336d131943b77
SSDEEP
1536:NjeNReoa4hqepyavkggRnRPD7F5k14G8GlUFeC:NjeNba4hqeD2D7fk/UFeC
Checks for missing Authenticode signature.
resource |
---|
c70b20f201c284f61913308d35db5d17 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ImageDirectoryEntryToData
CloseHandle
CreateFileA
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FileTimeToSystemTime
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTime
GetThreadPriority
GetTickCount
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsBadCodePtr
LCMapStringA
LoadLibraryA
Module32First
Module32Next
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetPriorityClass
SetThreadPriority
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
lstrcmpiA
CallNextHookEx
EnumThreadWindows
FindWindowA
GetWindowLongA
MessageBoxA
SetTimer
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
timeGetSystemTime
timeSetEvent
@@Jshj@Finalize
@@Jshj@Initialize
Hook_KB
UnHook_KB
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ