EnablePreHandle
GetCapsLockState
SetHook
SwitchLayot
Static task
static1
Behavioral task
behavioral1
Sample
6d93bedb6281cdc95dacceda76b9ede0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6d93bedb6281cdc95dacceda76b9ede0N.dll
Resource
win10v2004-20240802-en
Target
6d93bedb6281cdc95dacceda76b9ede0N.exe
Size
32KB
MD5
6d93bedb6281cdc95dacceda76b9ede0
SHA1
585e7c11e5222c43d3b0596498352ca0316e6eca
SHA256
bb4d6a4ebb55f7c7f81a5e83ebb58e45815d02bf1d7db4268e79d6458e0b6cb3
SHA512
308ec18e2978e99fcad3f3b591a9613751f9544f676f04a63744b07ea7d4370e3ec72cbbe7f4261422d4ade272a34e2fd78e08698d536641aa9fb8614c983f6e
SSDEEP
384:0OO3ICNTpnZOaxgxZkEH0QmlUniym6l7sBpal4oIo9+R2:0NICNTpAnZl0HxalBIo9j
Checks for missing Authenticode signature.
resource |
---|
6d93bedb6281cdc95dacceda76b9ede0N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetFocus
GetKeyState
IsWindow
SendMessageA
WideCharToMultiByte
FreeEnvironmentStringsW
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
LoadLibraryA
MultiByteToWideChar
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
EnablePreHandle
GetCapsLockState
SetHook
SwitchLayot
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ