AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
Static task
static1
Behavioral task
behavioral1
Sample
2bd3a7ed70d0693df72bbf6950d5c7dbe41ffc8ac0862437086039bcf565dda6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bd3a7ed70d0693df72bbf6950d5c7dbe41ffc8ac0862437086039bcf565dda6.dll
Resource
win10v2004-20240802-en
Target
2bd3a7ed70d0693df72bbf6950d5c7dbe41ffc8ac0862437086039bcf565dda6
Size
3.5MB
MD5
a57f8f0b9a5514c8c4c389b69fe87ab9
SHA1
96f76945b485396289e3d92fd22556a86a602d08
SHA256
2bd3a7ed70d0693df72bbf6950d5c7dbe41ffc8ac0862437086039bcf565dda6
SHA512
d3be26582c4a1e8fe80de022b6403719622eb0576d9b6deddfd089d801ca1326bdf384145a919c5e907c8231c87678a689e99e7fc229fd667486d90c775aa253
SSDEEP
49152:sAjR5dpDCQ9ZLLdlcEcr9OKcS3JHw6h2vyZXeMEmYWn6ck7SHL4j9TfoqLLWOHfP:F1F7PcZJHxh2sXeMhnu9j99CM
Checks for missing Authenticode signature.
resource |
---|
2bd3a7ed70d0693df72bbf6950d5c7dbe41ffc8ac0862437086039bcf565dda6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
AddApplicationToExceptionListW
RemoveApplicationFromExceptionListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ