AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
49f2aca313c9abc3a8a69a3f53d97b256cf56464d44e5a2321f5c21d5ef3ab00.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49f2aca313c9abc3a8a69a3f53d97b256cf56464d44e5a2321f5c21d5ef3ab00.dll
Resource
win10v2004-20240802-en
Target
49f2aca313c9abc3a8a69a3f53d97b256cf56464d44e5a2321f5c21d5ef3ab00
Size
3.5MB
MD5
41fb06de53e426a26394f4d4cb07e7a9
SHA1
b62b79792cea83132382cb214a543d8e4dd8d8b6
SHA256
49f2aca313c9abc3a8a69a3f53d97b256cf56464d44e5a2321f5c21d5ef3ab00
SHA512
af288d5cb4bf72776681e47e985a08f14ce39e7962140c04b6afdaa937b4cae1a698353eb3a3bdad6ca1a3a5bc5af8c9e489e02d142de73ff1803e3d93158fbb
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfE:F1F7PcZJHxh2sXeMhnu9j99CL
Checks for missing Authenticode signature.
resource |
---|
49f2aca313c9abc3a8a69a3f53d97b256cf56464d44e5a2321f5c21d5ef3ab00 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ