AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
1af0801e7ff053e7a3f62d5815fd17db55bebcd7fb590495015143390eaa9c46.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1af0801e7ff053e7a3f62d5815fd17db55bebcd7fb590495015143390eaa9c46.dll
Resource
win10v2004-20240802-en
Target
1af0801e7ff053e7a3f62d5815fd17db55bebcd7fb590495015143390eaa9c46
Size
3.5MB
MD5
f7bd73cb13d9101d7816d5914c46264c
SHA1
0dcc62e8f1f7a775be4ac105e36d9a3740d15f44
SHA256
1af0801e7ff053e7a3f62d5815fd17db55bebcd7fb590495015143390eaa9c46
SHA512
edcb8ca3336190631fad9bccf9ad1b878de61f469ca38fa85d696bd8529f7734dea984fcf8e71362e784cafa2f39066e7d7517aa99ee4b567ce23fcbb01cc92b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfU:F1F7PcZJHxh2sXeMhnu9j99Cb
Checks for missing Authenticode signature.
resource |
---|
1af0801e7ff053e7a3f62d5815fd17db55bebcd7fb590495015143390eaa9c46 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ