AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
d2d8be3203127995edd1acb19b4285174a83f24923110e217a973350f31553d4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d8be3203127995edd1acb19b4285174a83f24923110e217a973350f31553d4.dll
Resource
win10v2004-20240802-en
Target
d2d8be3203127995edd1acb19b4285174a83f24923110e217a973350f31553d4
Size
3.5MB
MD5
43ddcfe5ac14c0813749864d9bc242da
SHA1
4968e4d3b48157c725ac728cc388504bd371e3ad
SHA256
d2d8be3203127995edd1acb19b4285174a83f24923110e217a973350f31553d4
SHA512
ad6856e8f0b6c03d67a859a9412fcd6061cdb014f432324bf6ac3d4411cdd0c837793b7c498068c1159700ff4bc8265f58e02c2cc09c389d8b4a61c3b3b2ee88
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfx:F1F7PcZJHxh2sXeMhnu9j99C2
Checks for missing Authenticode signature.
resource |
---|
d2d8be3203127995edd1acb19b4285174a83f24923110e217a973350f31553d4 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ