EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
654966e229fb95f8182ab8e9c2113e50N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
654966e229fb95f8182ab8e9c2113e50N.dll
Resource
win10v2004-20240709-en
Target
654966e229fb95f8182ab8e9c2113e50N.exe
Size
16KB
MD5
654966e229fb95f8182ab8e9c2113e50
SHA1
abf1c01fb0479cfa2743bc944f2b88eb30f6ad1a
SHA256
161eff372df369b2e8d5d0b0abfff965684866e1fb5544198e1bb19dc0988e39
SHA512
eee72a558f9419ed909659ef8b1edefb7538e9ff7b8464468dc690e4f1c576b7f18aab07cbb9da7edf67bc85eddf3af62ea59a880d638afdab9ac93748268f61
SSDEEP
384:b96ztqtblYBLIY5Hno0ApSUKrj2KkIKoJglwC6z1nvYYOlEF:bkYZ49no0AQhZglS1nHs6
Checks for missing Authenticode signature.
resource |
---|
654966e229fb95f8182ab8e9c2113e50N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ