AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
179ea3d1d01a0955fd0d5c25ac240c21026706ce3389bab4bf0674791586ede6.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
179ea3d1d01a0955fd0d5c25ac240c21026706ce3389bab4bf0674791586ede6.dll
Resource
win10v2004-20240802-en
Target
179ea3d1d01a0955fd0d5c25ac240c21026706ce3389bab4bf0674791586ede6
Size
3.5MB
MD5
b2a5ca042a1c3ea522bccddb1426f40f
SHA1
f630f63f53127b83657fb85e635a06da9806f172
SHA256
179ea3d1d01a0955fd0d5c25ac240c21026706ce3389bab4bf0674791586ede6
SHA512
e7831145e6b204871cf32794e3e98580d12ff9aac572741096a70528ac0a41a8d563eff2496ae610a9529a88ab10a2463c5ce974ca87aa193ec07126a2002a9b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfy:F1F7PcZJHxh2sXeMhnu9j99CR
Checks for missing Authenticode signature.
resource |
---|
179ea3d1d01a0955fd0d5c25ac240c21026706ce3389bab4bf0674791586ede6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ