Eminence_Hook[.]exe

General

Target
Eminence_Hook.exe
Size 16KB
Sample260930-v2lslsvdmc
SHA256 1919a11a8fce589ead833467aa0e6fdba7feae54ded89f5cdd4419cd185862d4
MD5 e557b70fb8a487f99ac106e940b8eed0
SHA1 ebe5334b8ccaf876bdb73e5633e3c37c74c4b087
SHA512 7b46b5b7450450a1da7ce3e75a836bc316b1339e6ec97c4b5f7da4e019186e75dd027099559c2b77fc4e6d4368204ae35d1b1583560f007dc6225eac78961b8c
SSDEEP 192:v8B1bOxgNM6P1VEIRC95Delc/hhcNyhfwdcH0tahyVx+V9CY1o4AeLBnO5XfYYaX:v8B16uy6d3+NeK/Mg2dcUzD4+5KE
TLSH
T14572F70ABAEA45EEE1BBC23689735C258573F6056731AACF6340501D0EF97D06E31F45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Eminence_Hook.exe

File Explorer

Eminence_Hook.exe

.exe 16KB

Eminence_Hook.exe

IMPHASH ff3c50d74aa40efad4dc07060189227d
SHA256 1919a11a8fce589ead833467aa0e6fdba7feae54ded89f5cdd4419cd185862d4
MD5 e557b70fb8a487f99ac106e940b8eed0
SHA1 ebe5334b8ccaf876bdb73e5633e3c37c74c4b087
SHA512 7b46b5b7450450a1da7ce3e75a836bc316b1339e6ec97c4b5f7da4e019186e75dd027099559c2b77fc4e6d4368204ae35d1b1583560f007dc6225eac78961b8c
SSDEEP 192:v8B1bOxgNM6P1VEIRC95Delc/hhcNyhfwdcH0tahyVx+V9CY1o4AeLBnO5XfYYaX:v8B16uy6d3+NeK/Mg2dcUzD4+5KE
TLSH
T14572F70ABAEA45EEE1BBC23689735C258573F6056731AACF6340501D0EF97D06E31F45
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\Desktop\tealiploader\tealipPROJE_2026\tealiploader2026\hookloader\build\TealipInjector.pdb

kernel32

FreeLibrary LoadLibraryExW GetProcAddress GetCommandLineW WaitForSingleObject GetFileAttributesW OpenProcess Sleep CloseHandle Beep LocalFree GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetStartupInfoW GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW InitializeSListHead

user32

GetWindowThreadProcessId MessageBoxW PostThreadMessageW SetWindowsHookExW UnhookWindowsHookEx FindWindowW IsWindow

shell32

CommandLineToArgvW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

dbghelp

ImageDirectoryEntryToData

vcruntime140

__current_exception __current_exception_context memset __C_specific_handler memcpy __std_exception_copy __std_exception_destroy _CxxThrowException

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit _seh_filter_exe _set_app_type _initialize_onexit_table _register_onexit_function _crt_atexit terminate _exit _get_wide_winmain_command_line _register_thread_local_exe_atexit_callback _configure_wide_argv exit _initterm_e _initterm _initialize_wide_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

wcslen strlen

Sharing