AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
e33901d7cce6e0d5e4b9b531de90f74417e4eff7fb4d7d042011aed5f55a60f4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e33901d7cce6e0d5e4b9b531de90f74417e4eff7fb4d7d042011aed5f55a60f4.dll
Resource
win10v2004-20240802-en
Target
e33901d7cce6e0d5e4b9b531de90f74417e4eff7fb4d7d042011aed5f55a60f4
Size
3.5MB
MD5
beb76b243a773f8b5bc94816457e0e78
SHA1
37ce30424975ee8192e015087991ed123a5127c3
SHA256
e33901d7cce6e0d5e4b9b531de90f74417e4eff7fb4d7d042011aed5f55a60f4
SHA512
71fcfab8ca38e3cbc2483a2f2c2d05dfe93db6f3871d0c021f28b6e7751a0d34045149f9d8816f519ffe44d23351dafff6381614017643a9a4e8523f04562e6b
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfD:F1F7PcZJHxh2sXeMhnu9j99CU
Checks for missing Authenticode signature.
resource |
---|
e33901d7cce6e0d5e4b9b531de90f74417e4eff7fb4d7d042011aed5f55a60f4 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ