AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
3411a53fb0fb6f0197decc0e34d7462ebcd7830b66a02a4f5e78abe7c4ec7d87.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3411a53fb0fb6f0197decc0e34d7462ebcd7830b66a02a4f5e78abe7c4ec7d87.dll
Resource
win10v2004-20240802-en
Target
3411a53fb0fb6f0197decc0e34d7462ebcd7830b66a02a4f5e78abe7c4ec7d87
Size
3.5MB
MD5
0b84b84297d9d5ce07a681ee950988b2
SHA1
4725e9fa3385769b826fdc7c0a9fc12c7dc0df84
SHA256
3411a53fb0fb6f0197decc0e34d7462ebcd7830b66a02a4f5e78abe7c4ec7d87
SHA512
adfdf985c4b0965961acc6fe89b1287feab58d806732a58a7b0b6bc52a99f7766d51476654f5f1cbf7e8bb5a8526eecfcb2cd5980ab408a93a3578a66e1d573e
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfn:F1F7PcZJHxh2sXeMhnu9j99Cg
Checks for missing Authenticode signature.
resource |
---|
3411a53fb0fb6f0197decc0e34d7462ebcd7830b66a02a4f5e78abe7c4ec7d87 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ