AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
292062739a09dc53f3a18047aef3051ccfbcf988e311d9977ea1533fa85c3079.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
292062739a09dc53f3a18047aef3051ccfbcf988e311d9977ea1533fa85c3079.dll
Resource
win10v2004-20240802-en
Target
292062739a09dc53f3a18047aef3051ccfbcf988e311d9977ea1533fa85c3079
Size
3.5MB
MD5
57f78bf58143152cb0e925fee4997c51
SHA1
55f7468918849161e46210c9219a7c6b5e650d61
SHA256
292062739a09dc53f3a18047aef3051ccfbcf988e311d9977ea1533fa85c3079
SHA512
2946bf78d92becb80d5c2bc30684298cf52f49de6183bd615c54f1a9f1fa0d1094858704c042315fa5dd033e21216e4061ee644cb3119ef8aff13c13c375d650
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfu:F1F7PcZJHxh2sXeMhnu9j99CR
Checks for missing Authenticode signature.
resource |
---|
292062739a09dc53f3a18047aef3051ccfbcf988e311d9977ea1533fa85c3079 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ