AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
0aa3a6bedeb9a6ff05b77d6e799f806cbbb71a7014d7c3c20f918a42bcf1464e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0aa3a6bedeb9a6ff05b77d6e799f806cbbb71a7014d7c3c20f918a42bcf1464e.dll
Resource
win10v2004-20240802-en
Target
0aa3a6bedeb9a6ff05b77d6e799f806cbbb71a7014d7c3c20f918a42bcf1464e
Size
3.5MB
MD5
ed499eb92093cd83d5c9e202637457e3
SHA1
66b459a2e81c7d35e9fa617fa8ba1f4402096cbe
SHA256
0aa3a6bedeb9a6ff05b77d6e799f806cbbb71a7014d7c3c20f918a42bcf1464e
SHA512
0a14f7b221078c23184d83e58b9804feba1107460f86cbec08616de17c8412dd897d639e87dbb02dee8e5fc7197d6ce3a4bb240ca6e59f8f249efa504f673df9
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfS:F1F7PcZJHxh2sXeMhnu9j99CJ
Checks for missing Authenticode signature.
resource |
---|
0aa3a6bedeb9a6ff05b77d6e799f806cbbb71a7014d7c3c20f918a42bcf1464e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ