FindRelatedWnd
GetPWndRectByFWnd
SetFollowWndFlag
SetResetWndRgn
TFWGenReister
TFWNotifyPaint
TFWNotifyPaintEx
TFWNotifyReset
TFWNotifySuspend
TFWRegister
TFWStart
TFWStop
TFWUnRegister
Static task
static1
Behavioral task
behavioral1
Sample
51b12a1c294b5b29bf8cf861f30d478d85655e85746be1b8c0d7fbf083b19ee7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51b12a1c294b5b29bf8cf861f30d478d85655e85746be1b8c0d7fbf083b19ee7.dll
Resource
win10v2004-20240508-en
Target
51b12a1c294b5b29bf8cf861f30d478d85655e85746be1b8c0d7fbf083b19ee7
Size
528KB
MD5
afe96af3068e27a187665ea58c22c66d
SHA1
4be648932b70e227858e9cf4da8f5173c9cb1159
SHA256
51b12a1c294b5b29bf8cf861f30d478d85655e85746be1b8c0d7fbf083b19ee7
SHA512
dac0681e6fd97a30f3bbebbc185f02359ccab642e409764560e26cc38c25950384e0f0895c40b5b5985b2de25bce2e31bf2a5668b709ca9589172409a445c374
SSDEEP
12288:gLVzc2uUpnhQgX+rO70wsrzMEuNoTRzLJu:GnhQgX+ri0wsrzCNoJL0
Checks for missing Authenticode signature.
resource |
---|
51b12a1c294b5b29bf8cf861f30d478d85655e85746be1b8c0d7fbf083b19ee7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProfileStringA
OpenProcess
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
GetCurrentProcess
CreateThread
DefineDosDeviceA
GetDiskFreeSpaceExA
SetVolumeLabelA
GetVolumeInformationA
QueryDosDeviceW
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
LocalAlloc
lstrcmpA
GetFileAttributesExW
MoveFileExW
MoveFileExA
RemoveDirectoryW
CopyFileW
CreateDirectoryW
RemoveDirectoryA
CopyFileA
CreateDirectoryA
MoveFileW
MoveFileA
DeleteFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileA
GetFileAttributesA
SetFileAttributesA
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
GetSystemInfo
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
FlushFileBuffers
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
VirtualAlloc
UnhandledExceptionFilter
GetModuleHandleW
CreateFileA
GetFileInformationByHandle
CloseHandle
GetCurrentThreadId
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
MultiByteToWideChar
GetCurrentDirectoryW
GetSystemDirectoryW
GetCurrentDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
InterlockedDecrement
InterlockedIncrement
SetLastError
GetCurrentProcessId
Sleep
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetLastError
WaitForSingleObject
GetTickCount
lstrcpyA
GetModuleHandleA
LoadLibraryW
IsBadCodePtr
GetProcAddress
SetUnhandledExceptionFilter
LCMapStringW
lstrlenA
LocalFree
FormatMessageA
LoadResource
FindResourceExA
GetACP
lstrlenW
FormatMessageW
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SleepEx
InterlockedExchange
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
CreateEventA
SetEvent
PulseEvent
ResetEvent
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
SuspendThread
GetExitCodeThread
CreateFileW
WriteFile
SetFilePointer
OutputDebugStringW
FreeConsole
WriteConsoleA
GetStdHandle
AllocConsole
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
HeapFree
HeapAlloc
ExitProcess
FatalAppExitA
GetCPInfo
GetOEMCP
TerminateProcess
HeapReAlloc
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
FillRect
GetWindowRect
GetWindowPlacement
FindWindowW
ClientToScreen
GetDC
GetClassInfoExA
LoadIconA
LoadCursorA
RegisterClassExA
MessageBoxA
SetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationA
OpenInputDesktop
OpenDesktopA
GetThreadDesktop
SetFocus
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
IsWindowEnabled
SetForegroundWindow
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
IsWindow
RegisterWindowMessageA
GetForegroundWindow
GetWindowDC
ReleaseDC
SetRect
SetWindowRgn
GetClientRect
IsIconic
BeginPaint
EndPaint
SetCapture
SetActiveWindow
ReleaseCapture
GetParent
SendMessageW
DefWindowProcA
MoveWindow
SetWindowPos
ShowWindow
InvalidateRect
PostMessageA
IsWindowVisible
CreateWindowExA
SetWindowLongA
GetWindowLongA
MessageBoxW
GetClassNameW
GetWindowTextW
EnumWindows
OpenDesktopW
SetThreadDesktop
CloseDesktop
GetWindowThreadProcessId
OpenWindowStationA
EnumDesktopsW
CloseWindowStation
OffsetRect
IntersectRect
SystemParametersInfoA
GetSystemMetrics
DeleteObject
DeleteDC
GetBkColor
GetClipBox
GetDCOrgEx
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
LineTo
MoveToEx
CreatePen
CombineRgn
CreateRectRgn
ExtCreateRegion
GetObjectA
CreateDIBSection
GetStockObject
GetPixel
CreateSolidBrush
OpenSCManagerA
RegCreateKeyW
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
QueryServiceStatus
CloseServiceHandle
OpenServiceA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyW
RegConnectRegistryA
ImmDisableIME
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
FindRelatedWnd
GetPWndRectByFWnd
SetFollowWndFlag
SetResetWndRgn
TFWGenReister
TFWNotifyPaint
TFWNotifyPaintEx
TFWNotifyReset
TFWNotifySuspend
TFWRegister
TFWStart
TFWStop
TFWUnRegister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ