AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
c9325ddf73cc3449963e1e043478b9b651d3cdec929439b8efcfa1491fe5dfa7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c9325ddf73cc3449963e1e043478b9b651d3cdec929439b8efcfa1491fe5dfa7.dll
Resource
win10v2004-20240802-en
Target
c9325ddf73cc3449963e1e043478b9b651d3cdec929439b8efcfa1491fe5dfa7
Size
3.5MB
MD5
70b0ff0ca32b3915b975eefb3c9a1181
SHA1
bc8ede605dfb28bd8147f01ee2d2079bfc9897c6
SHA256
c9325ddf73cc3449963e1e043478b9b651d3cdec929439b8efcfa1491fe5dfa7
SHA512
bbec2775cdd705a3390fe17670c4b0d551510ce98d5b6f12d131371e3063ede47010a52e6bf1a37d9820a0c50c5890531f0d2dc6b7fa497eace7dd352189183e
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfX:F1F7PcZJHxh2sXeMhnu9j99Cs
Checks for missing Authenticode signature.
resource |
---|
c9325ddf73cc3449963e1e043478b9b651d3cdec929439b8efcfa1491fe5dfa7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ