AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
ece8cf817d68d8a21bae0703ba2a9979882c3deeea3db3175098ffe994f9e3de.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ece8cf817d68d8a21bae0703ba2a9979882c3deeea3db3175098ffe994f9e3de.dll
Resource
win10v2004-20240802-en
Target
ece8cf817d68d8a21bae0703ba2a9979882c3deeea3db3175098ffe994f9e3de
Size
3.5MB
MD5
6639e2c89a6b2bd091fa9c39e2112f61
SHA1
64e5420fd309644a0952ab4f93e74a1c48fbeaa9
SHA256
ece8cf817d68d8a21bae0703ba2a9979882c3deeea3db3175098ffe994f9e3de
SHA512
8f826424920e9f624674a16774f58514c7762c9b436b9e9818df4f6fca349f399e95c05a10f9d0295cd36b997f56e5829df5805a600edea349870ab43e22ec1b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHf1:F1F7PcZJHxh2sXeMhnu9j99CS
Checks for missing Authenticode signature.
resource |
---|
ece8cf817d68d8a21bae0703ba2a9979882c3deeea3db3175098ffe994f9e3de |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ