AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
1c0c3109168b81250b4ec1016e37b24a8d2b17872c3ff052d6e072484eeefe08.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1c0c3109168b81250b4ec1016e37b24a8d2b17872c3ff052d6e072484eeefe08.dll
Resource
win10v2004-20240802-en
Target
1c0c3109168b81250b4ec1016e37b24a8d2b17872c3ff052d6e072484eeefe08
Size
3.5MB
MD5
4095b824211f659aac112811cea52229
SHA1
bd650d4edc723a215707a40566d7904080f417b8
SHA256
1c0c3109168b81250b4ec1016e37b24a8d2b17872c3ff052d6e072484eeefe08
SHA512
75d1477f5658726eea49c92defb072c3ea8bb83c222f05cd9a84d42474e432b2b4f049a9af982b7ba8886030ff19c1a8640f1a344774fa4923fd59043299817d
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfj:F1F7PcZJHxh2sXeMhnu9j99CU
Checks for missing Authenticode signature.
resource |
---|
1c0c3109168b81250b4ec1016e37b24a8d2b17872c3ff052d6e072484eeefe08 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ