CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
4c29136a7c79c79409ce8255d3b6157b4fc08a591220993bb90645f2acac2cab.dll
Resource
win7-20240903-en
Target
4c29136a7c79c79409ce8255d3b6157b4fc08a591220993bb90645f2acac2cab
Size
940KB
MD5
4087adacea74316cd6099ea4f269c758
SHA1
a5d17da00274ea0ce366dd891baca90be38b587b
SHA256
4c29136a7c79c79409ce8255d3b6157b4fc08a591220993bb90645f2acac2cab
SHA512
f6377700b210cc2503f495a68dc6485ba880c5a88724657b6851c6889be808d2650f77bd3303c0088da2e518d305b2d29797d565dce19502d8cea4c5b52d29ed
SSDEEP
12288:EPVKLvdxQPKSoVXxTaGcb68Uzx2TBeOWhZJpK8:EtKTrsKSKBTSb6DUXWq8
Checks for missing Authenticode signature.
Processes:
resource |
---|
4c29136a7c79c79409ce8255d3b6157b4fc08a591220993bb90645f2acac2cab |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrTrimW
UrlUnescapeA
CryptCATPutAttrInfo
UnregisterWaitEx
EnumTimeFormatsA
GetNLSVersion
GetLastError
CloseHandle
SetEvent
FindActCtxSectionStringW
GetUrlCacheEntryInfoW
SetupLogErrorA
SetupDiSetSelectedDriverA
AssociateColorProfileWithDeviceW
ldiv
isdigit
UuidIsNil
RpcBindingSetAuthInfoExA
NdrUserMarshalUnmarshall
VarDateFromCy
VarR8FromDec
HICON_UserMarshal
MprAdminInterfaceTransportAdd
CopyEnhMetaFileW
CreateMetaFileW
CreateDiscardableBitmap
SetWindowExtEx
GetRegionData
DeleteColorSpace
NetShareGetInfo
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ