AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
468f5328356d7ae70567992c15260f383ae74c67c2a832bf4f3f91ed0b2533ac.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
468f5328356d7ae70567992c15260f383ae74c67c2a832bf4f3f91ed0b2533ac.dll
Resource
win10v2004-20240802-en
Target
468f5328356d7ae70567992c15260f383ae74c67c2a832bf4f3f91ed0b2533ac
Size
3.5MB
MD5
90087c53f52e5cde9f2c14fd850c9017
SHA1
4bf0fb9b19819884b559965f97219c197079b83b
SHA256
468f5328356d7ae70567992c15260f383ae74c67c2a832bf4f3f91ed0b2533ac
SHA512
74c2e936f0affd30a7f225c5b85d330ccf2d9afb05b84987a370fe267518741122a52732ac4085dd3ea7a3ec21325c2642db317cc117cc026dabcd58f0723fda
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfT:F1F7PcZJHxh2sXeMhnu9j99CU
Checks for missing Authenticode signature.
resource |
---|
468f5328356d7ae70567992c15260f383ae74c67c2a832bf4f3f91ed0b2533ac |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ