CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
4e5e6fcb83a84d1976bc6ce0355a4f20.dll
Resource
win7-20231215-en
Target
4e5e6fcb83a84d1976bc6ce0355a4f20.exe
Size
720KB
MD5
4e5e6fcb83a84d1976bc6ce0355a4f20
SHA1
03ed38f5bc74e6fb8a4e0b751c1e79ddfedbbabf
SHA256
04f8b7b563f8c811e87762301b7669febc953ab55f9442a6fa62776432765757
SHA512
137b492f3a4ed96c60e2e5f4c689f487f1962df20d2945921ff178fd9af60ec7e4134b069f00e2614870fce47fb02a175e3239d671597d76328ef63e58b19e3e
SSDEEP
12288:p6BBWGJW6eC85Df97+yXUj7SncCxj8iHGo59S1WQSCtEdFO7YKJf6:p6BQBjlc728jo7S1bl6FbK
Checks for missing Authenticode signature.
resource |
---|
4e5e6fcb83a84d1976bc6ce0355a4f20.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DestroyCaret
GetWindowLongW
GetMessageW
LoadImageW
GetDoubleClickTime
LockWindowUpdate
DrawMenuBar
GetScrollPos
DefWindowProcW
DeregisterEventSource
GetSidSubAuthority
InitiateSystemShutdownExW
GetPrinterDriverDirectoryA
DeleteUrlCacheEntry
GetRandomRgn
FillRgn
GetTextMetricsA
GetTextExtentPointA
DecryptMessage
fputs
strcmp
lstrcpynA
GlobalAddAtomA
GetBinaryTypeW
Module32NextW
LoadLibraryA
FindFirstFileW
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ