AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
58978de4e0462bf658f282bc9c110c847fd2de5c1e7e269abb28b507c3c6625f.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
58978de4e0462bf658f282bc9c110c847fd2de5c1e7e269abb28b507c3c6625f.dll
Resource
win10v2004-20240802-en
Target
58978de4e0462bf658f282bc9c110c847fd2de5c1e7e269abb28b507c3c6625f
Size
3.5MB
MD5
db1723c49ce268ee7c0df626b59da4e2
SHA1
1d603364b6c599e0ee0b0ed26a9deb9f4faa58bb
SHA256
58978de4e0462bf658f282bc9c110c847fd2de5c1e7e269abb28b507c3c6625f
SHA512
5b51f66ab36049a6d2ca772b11ac96442d99082c4cd5554ab4ef620f559d2dfe012254905d54fe283dd8b18a6915edc86895dca13185ec5d8d975e8bf00cc004
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfw:F1F7PcZJHxh2sXeMhnu9j99CD
Checks for missing Authenticode signature.
resource |
---|
58978de4e0462bf658f282bc9c110c847fd2de5c1e7e269abb28b507c3c6625f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ