AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
26de7a27726f3f4820a5f232004ca3a96fce3bb6b9b9a3cbf46f51b1eadc1949.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26de7a27726f3f4820a5f232004ca3a96fce3bb6b9b9a3cbf46f51b1eadc1949.dll
Resource
win10v2004-20240802-en
Target
26de7a27726f3f4820a5f232004ca3a96fce3bb6b9b9a3cbf46f51b1eadc1949
Size
3.5MB
MD5
fa67539d318415cd6abf7df85e9b9221
SHA1
4c5dee0d3c4bf55000f81477a1d4027d5e0a22a3
SHA256
26de7a27726f3f4820a5f232004ca3a96fce3bb6b9b9a3cbf46f51b1eadc1949
SHA512
e83412a87abe66a0b542308925039503f251ee6eeb6e2d13e292c80b3ee088034c72e4c03497011bfba3115da617676cbdfeb905d653d44a4058ce95d65e61ce
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfZ:F1F7PcZJHxh2sXeMhnu9j99Ce
Checks for missing Authenticode signature.
resource |
---|
26de7a27726f3f4820a5f232004ca3a96fce3bb6b9b9a3cbf46f51b1eadc1949 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ