CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
4679898201806dc6de8e98d5fe539ed2.dll
Resource
win7-20231215-en
Target
4679898201806dc6de8e98d5fe539ed2
Size
644KB
MD5
4679898201806dc6de8e98d5fe539ed2
SHA1
0b0a13522449f99f2e4eae9253700b542fca3461
SHA256
b60b7a922e6e0e011f495a1be04333582f76e52ddabefa0b020ed51a0d263cde
SHA512
62b61499c7f1c8acf7665d18941d4f3a9b0b34f7476921950f92040c251a9f00f4cf59d9859fa8c1960943d412230aa17eaa536f0883745b168101e148a29633
SSDEEP
12288:ZKYQ5LL540CV3UIeLPrleV1F0e8gMA/9L0l3HATpKR4:AYQ5p4f0POF0nkls3opKR
Checks for missing Authenticode signature.
resource |
---|
4679898201806dc6de8e98d5fe539ed2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetBkColor
GetViewportExtEx
GetSystemPaletteUse
GetModuleFileNameExW
IsValidCodePage
GetDiskFreeSpaceExA
GetCurrentProcess
GetBinaryTypeW
GetConsoleOutputCP
GetFileType
FlsGetValue
LocalAlloc
GetLastError
DosDateTimeToFileTime
GetErrorMode
GetProfileStringA
SetHandleCount
FindResourceExW
ExitThread
GetMessagePos
GetKeyboardLayout
GetMenuItemInfoA
GetClassWord
GetScrollBarInfo
IsCharAlphaNumericA
LoadMenuA
DefMDIChildProcW
IsWellKnownSid
AreAnyAccessesGranted
RegDisablePredefinedCacheEx
SetThreadToken
GetSecurityDescriptorOwner
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ