AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
e283198884f88bf5577e7c67964ab0a51c366fcee73ca42734c4d6925e62a172.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e283198884f88bf5577e7c67964ab0a51c366fcee73ca42734c4d6925e62a172.dll
Resource
win10v2004-20240802-en
Target
e283198884f88bf5577e7c67964ab0a51c366fcee73ca42734c4d6925e62a172
Size
3.5MB
MD5
f4048792130a76ba5c193cf73551a632
SHA1
47da457f1e2994fe2abf1cddf26f440f58632675
SHA256
e283198884f88bf5577e7c67964ab0a51c366fcee73ca42734c4d6925e62a172
SHA512
8c7f71741ff27d12284ac292a0b4fc4af681e8a7817f6b88a70e1990f42b0c3f09026e5b5afb7525d873793d74068ad5c9366bb2a7d102890c7213eb88daa124
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfa:F1F7PcZJHxh2sXeMhnu9j99CV
Checks for missing Authenticode signature.
resource |
---|
e283198884f88bf5577e7c67964ab0a51c366fcee73ca42734c4d6925e62a172 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ