AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
dbbf9cff84e1bfd5a32a1d5e1dfab510b6cd1d75669989d8082a6c695b330b98N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbbf9cff84e1bfd5a32a1d5e1dfab510b6cd1d75669989d8082a6c695b330b98N.dll
Resource
win10v2004-20240802-en
Target
dbbf9cff84e1bfd5a32a1d5e1dfab510b6cd1d75669989d8082a6c695b330b98N
Size
3.5MB
MD5
241884659bcccd2c7135936f4a712770
SHA1
5f3af49c4ed217502df09eacd4c98a889c6a7ccb
SHA256
dbbf9cff84e1bfd5a32a1d5e1dfab510b6cd1d75669989d8082a6c695b330b98
SHA512
43f92879b74e6f9e218948c1d5ff5f7c1d5ca63f5de459dff983e92497d311d39dcc8f1514c2cafa11520ec69ebf67108d510f0f8099321b73696c0e50e32a8b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHf6:F1F7PcZJHxh2sXeMhnu9j99C9
Checks for missing Authenticode signature.
resource |
---|
dbbf9cff84e1bfd5a32a1d5e1dfab510b6cd1d75669989d8082a6c695b330b98N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ