AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
461e9a28833602aa0471732fe89b4dc2fd52ba6636ef0ca395e80433e08a6a86.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
461e9a28833602aa0471732fe89b4dc2fd52ba6636ef0ca395e80433e08a6a86.dll
Resource
win10v2004-20240802-en
Target
461e9a28833602aa0471732fe89b4dc2fd52ba6636ef0ca395e80433e08a6a86
Size
3.5MB
MD5
b8f190494f01cf5c319e675330c0cc05
SHA1
46bf46c71938336b7bac52bb29c9fe07b008cea7
SHA256
461e9a28833602aa0471732fe89b4dc2fd52ba6636ef0ca395e80433e08a6a86
SHA512
808cc1be4d63fc6a94ec2d8eeee8233e38b9978fad1e7e66245299cf9f14b8c57e7ba715843122bcf2a29115260da8d863941244d77a896740f30a05663f4711
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHf7:F1F7PcZJHxh2sXeMhnu9j99CE
Checks for missing Authenticode signature.
resource |
---|
461e9a28833602aa0471732fe89b4dc2fd52ba6636ef0ca395e80433e08a6a86 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ