CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
4aa9b7b5b577b6596e284ef74944718f3e790cbdda9f8fc30c065a545dab628a.dll
Resource
win7-20240903-en
Target
4aa9b7b5b577b6596e284ef74944718f3e790cbdda9f8fc30c065a545dab628a
Size
1.1MB
MD5
47256612c3c8c8f506e0755af28551e8
SHA1
c72c90635b24feadcd786fef8cfe756eaa14b4cb
SHA256
4aa9b7b5b577b6596e284ef74944718f3e790cbdda9f8fc30c065a545dab628a
SHA512
c84b91c039127bf34c2bf3996fe5c044dbd34ca248f8117966d4a43582f4e87578b471675278a6f46ba20fe58856144c8498d435e4df15075a087a81815e0075
SSDEEP
12288:IkMZ+g4TyilMqFvPIV93i/S0hzmOBt5nihfSxI/mhjEvqJ0D/eAQsroXAkH64C:IkMZ+gf4ltGd8H1fYO0q2G1Ah
Checks for missing Authenticode signature.
Processes:
resource |
---|
4aa9b7b5b577b6596e284ef74944718f3e790cbdda9f8fc30c065a545dab628a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RpcBindingSetAuthInfoExA
NdrUserMarshalUnmarshall
UuidIsNil
MprAdminInterfaceTransportAdd
EnumTimeFormatsA
UnregisterWaitEx
FindActCtxSectionStringW
SetEvent
GetNLSVersion
CloseHandle
GetLastError
VarDateFromCy
SetupLogErrorA
SetupDiSetSelectedDriverA
CryptCATPutAttrInfo
GetRegionData
CreateDiscardableBitmap
CreateMetaFileA
SetWindowExtEx
CopyEnhMetaFileW
DeleteColorSpace
NetShareGetInfo
AssociateColorProfileWithDeviceW
GetUrlCacheEntryInfoW
ldiv
isdigit
HICON_UserMarshal
UrlUnescapeA
StrTrimW
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ