AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
4e618fbec2e1834eb098f24e3f13bcb46b9b6e7f90ea1a7326575b4606d6e668.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e618fbec2e1834eb098f24e3f13bcb46b9b6e7f90ea1a7326575b4606d6e668.dll
Resource
win10v2004-20240802-en
Target
4e618fbec2e1834eb098f24e3f13bcb46b9b6e7f90ea1a7326575b4606d6e668
Size
3.5MB
MD5
9dde1520b57741f55d02ecaaf0019a0f
SHA1
6afdcd9274530afc4e643175e0d68ede70fb0238
SHA256
4e618fbec2e1834eb098f24e3f13bcb46b9b6e7f90ea1a7326575b4606d6e668
SHA512
db11bc3348129dae7fbf15890cc0db3682bc2de798598edf4ba9220f696eb4958c3c8e7b3c4812f41bcbf17913eb10596cc92315323c8c13a8733037c42f49e2
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfR:F1F7PcZJHxh2sXeMhnu9j99CW
Checks for missing Authenticode signature.
resource |
---|
4e618fbec2e1834eb098f24e3f13bcb46b9b6e7f90ea1a7326575b4606d6e668 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ