GamePanelExternalHook.pdb
Static task
static1
Behavioral task
behavioral1
Sample
GamePanelExternalHook.dll
Resource
win10v2004-20240508-en
General
-
Target
GamePanelExternalHook.dll
-
Size
19KB
-
MD5
19d5307bcdccc1984cbfa4cb0ebbdf64
-
SHA1
7ab617bf56d661e4868a4e2fb8c659ded656aaad
-
SHA256
e0988e4543a96c3333990050fac815c3dcfa35c86fefa17f89676f4fdb90adb1
-
SHA512
f6ce1049daee68af0af68f86ad86130feb63e4a64728ee57a905d7da4120632a2837c2819ed12a4ea494b4264555dbc6d85b7ca46a868f02a5d938bc963fe853
-
SSDEEP
384:fVwxlyEsKmx9BwIgzAKTAS2sWmIf/gTkX6zvbCoJa2luCs:fVgVlU9BwI4NiLKzUys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GamePanelExternalHook.dll
Files
-
GamePanelExternalHook.dll.dll windows:10 windows x86 arch:x86
cb5cc1c3ec7952e26712b3fb1cc825ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
__dllonexit
_onexit
_unlock
_except_handler4_common
_lock
_initterm
memcpy
free
_amsg_exit
_XcptFilter
_callnewh
malloc
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_purecall
memmove
??1type_info@@UAE@XZ
??3@YAXPAX@Z
user32
SetWindowsHookExW
RegisterWindowMessageW
CallNextHookEx
PostMessageW
IsWindow
UnhookWindowsHookEx
EnumWindows
GetWindowThreadProcessId
kernel32
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
TerminateProcess
Exports
Exports
?GPHHookWindowPointerDown@CGamePanelExternalHook@@SGIXZ
?GetInstance@CGamePanelExternalHook@@SGAAV1@XZ
?Hook@CGamePanelExternalHook@@QAEXPAUHWND__@@@Z
?SetIntercept@CGamePanelExternalHook@@QAEX_NPAUHWND__@@@Z
?Unhook@CGamePanelExternalHook@@QAEXXZ
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ