AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
7678224944c84d0d5ac2ad46e5e7076a17684a146957e8d9f49794690fdd1bf7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7678224944c84d0d5ac2ad46e5e7076a17684a146957e8d9f49794690fdd1bf7.dll
Resource
win10v2004-20240802-en
Target
7678224944c84d0d5ac2ad46e5e7076a17684a146957e8d9f49794690fdd1bf7
Size
3.5MB
MD5
a93ca5654433f3d272ae62a435bf80e7
SHA1
b8221679fbd5e4e9356f9546770de6b01fe719b3
SHA256
7678224944c84d0d5ac2ad46e5e7076a17684a146957e8d9f49794690fdd1bf7
SHA512
c72ac59c9d43b36a49567e061e3910adb152e280847300097c98bf8ae0071d3ff417ac80972c4fd752736d1ebaa286fb7b65ecb891a104633c4112ff9db143f6
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfd:F1F7PcZJHxh2sXeMhnu9j99CW
Checks for missing Authenticode signature.
resource |
---|
7678224944c84d0d5ac2ad46e5e7076a17684a146957e8d9f49794690fdd1bf7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ