AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
915a7260106bde108c6cc06a6bc7874c01f1fa1bc5017b2f65da9eec08682810.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
915a7260106bde108c6cc06a6bc7874c01f1fa1bc5017b2f65da9eec08682810.dll
Resource
win10v2004-20240802-en
Target
915a7260106bde108c6cc06a6bc7874c01f1fa1bc5017b2f65da9eec08682810
Size
3.5MB
MD5
ff1e743b591990a13c7e0cbd647e3bc7
SHA1
ad55e2ec2067807d6d636dc7bbd9bee96d64465b
SHA256
915a7260106bde108c6cc06a6bc7874c01f1fa1bc5017b2f65da9eec08682810
SHA512
4023dfc7bc64d4f5c785eedf6b8cb4a156e218a38442c6c8a8941fb4383d88dead8b063451036969aae5b7fd0c06154343b030337fad331ceb7b692334b73f88
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHf8:F1F7PcZJHxh2sXeMhnu9j99C/
Checks for missing Authenticode signature.
resource |
---|
915a7260106bde108c6cc06a6bc7874c01f1fa1bc5017b2f65da9eec08682810 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ