InstallAppHook
InstallApsHooks
ReleaseAppsHooks
_ConfigHookHandler@12
Static task
static1
Behavioral task
behavioral1
Sample
7e8bc803e677c0b2fbc75c123a5efcb643297f44e02644f6cead78b4f8187767.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7e8bc803e677c0b2fbc75c123a5efcb643297f44e02644f6cead78b4f8187767.dll
Resource
win10v2004-20240508-en
Target
7e8bc803e677c0b2fbc75c123a5efcb643297f44e02644f6cead78b4f8187767
Size
40KB
MD5
a385b986d05af7092e7a6069d6673045
SHA1
509d7279566d8e02b76efb6d5422c4f785bdcd13
SHA256
7e8bc803e677c0b2fbc75c123a5efcb643297f44e02644f6cead78b4f8187767
SHA512
d34d5ba60187c3eb67b59d52049c63094158da5372002fbb62066f76da2704574e172d7bb1a3f7ef84869b15249ef8695d62b3f97c8fb54b4b719b19c5a4fa25
SSDEEP
192:OMj8KLu0zFpdL+sv+++fBzOmyZ2fBPeg3CLis6pIY+slyW+sKihmfAwDnP:iYES+0JY5CYVQW+OhmoEP
Checks for missing Authenticode signature.
resource |
---|
7e8bc803e677c0b2fbc75c123a5efcb643297f44e02644f6cead78b4f8187767 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CallNextHookEx
RegisterWindowMessageW
SetWindowsHookExW
GetWindow
UnhookWindowsHookEx
GetClassNameW
SendMessageW
GetWindowModuleFileNameW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
GetProcAddress
GetModuleHandleW
GetSystemDirectoryW
Sleep
GetModuleFileNameW
wcscpy
wcscat
_wtoi
__dllonexit
_onexit
malloc
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_wcsicmp
wcspbrk
_wcsnicmp
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
wcsncmp
_wgetcwd
wcsstr
_itow
wcstok
wcscmp
free
InstallAppHook
InstallApsHooks
ReleaseAppsHooks
_ConfigHookHandler@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ