ApiHookChain
HooksCanUnloadNow
Init
Static task
static1
Behavioral task
behavioral1
Sample
a2fffd2afd51d900fcabddc933ec38a3ceaacdae1fdc3060d27398819501a845.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a2fffd2afd51d900fcabddc933ec38a3ceaacdae1fdc3060d27398819501a845.dll
Resource
win10v2004-20240802-en
Target
a2fffd2afd51d900fcabddc933ec38a3ceaacdae1fdc3060d27398819501a845
Size
268KB
MD5
d2be0c3994db677bb303be833c297086
SHA1
c762f1678becda5461a8605e7be3393e64729f4d
SHA256
a2fffd2afd51d900fcabddc933ec38a3ceaacdae1fdc3060d27398819501a845
SHA512
7ef19354c8346065bff1ddf736adad8fec02fb0b5c00b8b313520f394bdb6f9eb5ac73513548db31561bf274368229be42f7f4cba2ef82da3616ff11201deee3
SSDEEP
1536:v9S2EPiG/zaHS0zGWhZY4LqFcrR5VFWDXZhejNFCh:VSliG/kSuS05VFWDXZUhF
Checks for missing Authenticode signature.
resource |
---|
a2fffd2afd51d900fcabddc933ec38a3ceaacdae1fdc3060d27398819501a845 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetProcAddress
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileA
ReadFile
WriteFile
SetEndOfFile
GetVersion
CloseHandle
GetModuleHandleA
LocalFree
SetTimer
DestroyWindow
KillTimer
EnableWindow
GetDlgItemInt
GetWindowTextA
SetWindowTextA
wsprintfA
GetKeyState
ShowWindow
ShowCursor
GetWindowRect
MessageBoxA
SetWindowPos
GetDlgItem
SendMessageA
keybd_event
SendDlgItemMessageA
htons
inet_addr
strcpy
abs
sprintf
_exit
_ftol
strcmp
malloc
memset
free
atoi
memcpy
strlen
sscanf
strrchr
_initterm
_adjust_fdiv
UnhookApis
ApiHookChain
HooksCanUnloadNow
Init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ