Execute
RunPortableExecutable
encryptionKey
globalByteArray
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5e066d1f0785de43a1324cb5f65be29f7ca0678d89857c8b5e8c71c74b92d8f1N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5e066d1f0785de43a1324cb5f65be29f7ca0678d89857c8b5e8c71c74b92d8f1N.dll
Resource
win10v2004-20240802-en
Target
5e066d1f0785de43a1324cb5f65be29f7ca0678d89857c8b5e8c71c74b92d8f1N
Size
1.2MB
MD5
84defb405b8763fca94d200a42cc0f20
SHA1
d2cccd1e2d038d55efbaa1caad28ea36340d4ad5
SHA256
5e066d1f0785de43a1324cb5f65be29f7ca0678d89857c8b5e8c71c74b92d8f1
SHA512
786f0c79d2a91895c5eb8b643132aa171620642d04a6bc4c9835543695937f0d1a378922d6accd748b43ac154959806b0588570be4e7ec2bb9096a5f9ba436c7
SSDEEP
24576:4tYuDxnwgvM2l+GQJzZV69cOSM79gkFVLlfV7srxq8hNVp9COX6eh/P:4tYYxnwe+JJzCSMm6lcz6
Checks for missing Authenticode signature.
resource |
---|
5e066d1f0785de43a1324cb5f65be29f7ca0678d89857c8b5e8c71c74b92d8f1N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleFileNameA
GetProcAddress
GetThreadContext
GetThreadId
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetThreadContext
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
fputs
free
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memset
realloc
strchr
strcmp
strerror
strlen
strncmp
strtoul
vfprintf
wcslen
Execute
RunPortableExecutable
encryptionKey
globalByteArray
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ