AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
ada87efc37a66672e5c9db2ff3e5201ba5a5500793b2c8f07f56f4aa364cdfa3.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ada87efc37a66672e5c9db2ff3e5201ba5a5500793b2c8f07f56f4aa364cdfa3.dll
Resource
win10v2004-20240802-en
Target
ada87efc37a66672e5c9db2ff3e5201ba5a5500793b2c8f07f56f4aa364cdfa3
Size
3.5MB
MD5
0e9bc99c7da0d19e0fc859ae1656284d
SHA1
afd0bd1744b6194e7e9bbaf1c389acf045cb47f1
SHA256
ada87efc37a66672e5c9db2ff3e5201ba5a5500793b2c8f07f56f4aa364cdfa3
SHA512
528c5e9471a2497c136a0c0402080304d3abe266f18283432c37cfac92d0c34a92ae602f752f63125dd8a0dd69ccf6db8590375a1a49eb47aaf1617f4f6032b0
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfG:F1F7PcZJHxh2sXeMhnu9j99CZ
Checks for missing Authenticode signature.
resource |
---|
ada87efc37a66672e5c9db2ff3e5201ba5a5500793b2c8f07f56f4aa364cdfa3 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ