AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
a94c84c7a82adba921a6efd08a62bffd953af07ea5a9ce6e8a7016fba0364763.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a94c84c7a82adba921a6efd08a62bffd953af07ea5a9ce6e8a7016fba0364763.dll
Resource
win10v2004-20240802-en
Target
a94c84c7a82adba921a6efd08a62bffd953af07ea5a9ce6e8a7016fba0364763
Size
3.5MB
MD5
c5578fb3dbd881b49325b49e999efa15
SHA1
b68bb71c868942ed4b3d6b8040fad9e2a931a5ba
SHA256
a94c84c7a82adba921a6efd08a62bffd953af07ea5a9ce6e8a7016fba0364763
SHA512
9d7ae1d34e8cb39a2363eed5f31ac00143e4742824bc27de6b606c64cbe3d5fc9e3bf2eccd51362033c4e49913aeb7d983443c5543735bc612c74734d461fb2b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfa:F1F7PcZJHxh2sXeMhnu9j99Ch
Checks for missing Authenticode signature.
resource |
---|
a94c84c7a82adba921a6efd08a62bffd953af07ea5a9ce6e8a7016fba0364763 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ