CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
29cc676374970636300ec1fe268c10af4871e25f4c9998546da9b6bb849012bd.dll
Resource
win7-20240729-en
Target
29cc676374970636300ec1fe268c10af4871e25f4c9998546da9b6bb849012bd
Size
1.1MB
MD5
9689001d9fbd08bc63318734814455df
SHA1
e115f3a4b3723f3375a7e164356266ab08a88b68
SHA256
29cc676374970636300ec1fe268c10af4871e25f4c9998546da9b6bb849012bd
SHA512
99d01a67ba2e1fb465aefeb588df89847262bfcb3d8fb839cfc3a93c87f9b88955f94329a462530dacf90b49ffc54a4824e46063eb958234bd3095447ef645f7
SSDEEP
12288:VkMZ+g4TyilMqFvPIV93i/S0hzmOBt5nihfSxI/mhjEvqJ0D/eAQsroXAkH64C:VkMZ+gf4ltGd8H1fYO0q2G1Ah
Checks for missing Authenticode signature.
Processes:
resource |
---|
29cc676374970636300ec1fe268c10af4871e25f4c9998546da9b6bb849012bd |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RpcBindingSetAuthInfoExA
NdrUserMarshalUnmarshall
UuidIsNil
MprAdminInterfaceTransportAdd
EnumTimeFormatsA
UnregisterWaitEx
FindActCtxSectionStringW
SetEvent
GetNLSVersion
CloseHandle
GetLastError
VarDateFromCy
SetupLogErrorA
SetupDiSetSelectedDriverA
CryptCATPutAttrInfo
GetRegionData
CreateDiscardableBitmap
CreateMetaFileA
SetWindowExtEx
CopyEnhMetaFileW
DeleteColorSpace
NetShareGetInfo
AssociateColorProfileWithDeviceW
GetUrlCacheEntryInfoW
ldiv
isdigit
HICON_UserMarshal
UrlUnescapeA
StrTrimW
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ