Static task
static1
Behavioral task
behavioral1
Sample
uohook.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
uohook.dll
Resource
win10v2004-20240508-en
General
-
Target
uohook.dll
-
Size
104KB
-
MD5
30a4e033198dee02c6a1673b54337d49
-
SHA1
c887dd8c17c9c4b7c62cd1f7927f0d51be52ba4e
-
SHA256
acdd65363a10a1fdb8e028c62d1be357c15f7c37b4a45c378af0ac4d5158d693
-
SHA512
f198a104c5a84a7404c53b377c442ffb36116d35f174f5df9d51c054bb383de1e2236a5772e2c507757265e7509b5b5f300a95448a7878af4f8557cbb6550613
-
SSDEEP
1536:1z4NiW2DnZRl9+92SqWeSWn09LZSQoW4aw6EeFdJUXnx5+QcN1tK9ZEDvqe4j+:1z4NiWkGKn09Y96Faj+QcN1JDvJ4j+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource uohook.dll
Files
-
uohook.dll.dll windows:4 windows x86 arch:x86
f716999a659a4bfbecb3d9777dc4ab30
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
connect
kernel32
VirtualProtect
Sleep
GetLastError
SetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQuery
IsBadWritePtr
lstrcmpiA
OutputDebugStringA
GetVersionExA
LCMapStringW
LCMapStringA
GetSystemInfo
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsBadCodePtr
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
InitializeCriticalSection
CreateFileA
SetStdHandle
FlushFileBuffers
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
IsBadReadPtr
user32
ClientToScreen
GetWindowRect
GetWindowDC
FillRect
SetCapture
GetWindowLongA
GetSysColorBrush
ReleaseCapture
GetSystemMetrics
LoadImageA
DrawFrameControl
MessageBoxA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ