beginPlugin
endPlugin
pluginInfo
Static task
static1
Behavioral task
behavioral1
Sample
d9eb839c022d3f8a6c4b5860a87922c87f639df1050b026caa526410e61d379a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9eb839c022d3f8a6c4b5860a87922c87f639df1050b026caa526410e61d379a.dll
Resource
win10v2004-20240426-en
Target
d9eb839c022d3f8a6c4b5860a87922c87f639df1050b026caa526410e61d379a
Size
8KB
MD5
5c784a01e61892ec8e1303ff92f1641d
SHA1
1c71e7e57a605a68424d3baee5e34e226bd9a883
SHA256
d9eb839c022d3f8a6c4b5860a87922c87f639df1050b026caa526410e61d379a
SHA512
1e56084a7e8b61f8a4b5f32da173c7fdc4fe4b4a498a1d5f6349f990d58211df85575fd69ac17caa4d91087915caa66e4060a37e7a4834f1c0375e9a36ce74e7
SSDEEP
96:kW1biZXj6xz1H+llUw4AHhqgf073kfbAQ7484X3/JN6WQeGCIgBe5lXxHnZ:51A6+lewzhMQn7484H/nueGCIgg5lBHZ
Checks for missing Authenticode signature.
resource |
---|
d9eb839c022d3f8a6c4b5860a87922c87f639df1050b026caa526410e61d379a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetBBWnd
FindRCFile
GetUnderExplorer
BBMessageBox
GetVersion
DisableThreadLibraryCalls
DestroyWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
DefWindowProcA
GetAsyncKeyState
KillTimer
SendMessageA
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
PostMessageA
MessageBoxA
_strupr
_stricmp
sprintf
_adjust_fdiv
_initterm
memset
free
fopen
malloc
fclose
fgets
strcpy
strcmp
strtol
strlen
strrchr
strchr
_memicmp
memcpy
beginPlugin
endPlugin
pluginInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ