AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
4d09ad999e54441b723461f19d4d6a8a94ad7cb762c257001e406d2be4693df2.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4d09ad999e54441b723461f19d4d6a8a94ad7cb762c257001e406d2be4693df2.dll
Resource
win10v2004-20240802-en
Target
4d09ad999e54441b723461f19d4d6a8a94ad7cb762c257001e406d2be4693df2
Size
3.5MB
MD5
03141cc28154cb326df6aeeb8e36ca88
SHA1
2862417b79cf7e3cd9f8b4f964a7937a578e4b55
SHA256
4d09ad999e54441b723461f19d4d6a8a94ad7cb762c257001e406d2be4693df2
SHA512
0e67115effecc0333253ed91d33749ff40fa46fb31618c7dbed6797a7c24457a1da1a7b39852f69ee6be2a4fa5672f15322bc6a62c438cc9b1e01dceb1e988f3
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfv:F1F7PcZJHxh2sXeMhnu9j99Co
Checks for missing Authenticode signature.
resource |
---|
4d09ad999e54441b723461f19d4d6a8a94ad7cb762c257001e406d2be4693df2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ