AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
bd4d248ed88b3ac104ba06237249808f68c9f835d4d13addd2e1f028969345c8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd4d248ed88b3ac104ba06237249808f68c9f835d4d13addd2e1f028969345c8.dll
Resource
win10v2004-20240802-en
Target
bd4d248ed88b3ac104ba06237249808f68c9f835d4d13addd2e1f028969345c8
Size
3.5MB
MD5
27c417b15390696431078b663bc24a01
SHA1
c2020c80c1e55f99f1abd385d9b773b9db2db0d4
SHA256
bd4d248ed88b3ac104ba06237249808f68c9f835d4d13addd2e1f028969345c8
SHA512
e1295ab99e6e78f2184bf8c6f3979587aa70e172dafe89a770c694f5c7be47f03d80a42811ee990f303d4c3bd92506a32b620b49d5d01c17924b2cf304da8ddc
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfd:F1F7PcZJHxh2sXeMhnu9j99CG
Checks for missing Authenticode signature.
resource |
---|
bd4d248ed88b3ac104ba06237249808f68c9f835d4d13addd2e1f028969345c8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ