CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
875b2e19f2f6be613a643c4e600e1b822157499ad3b4c62cdf4aeae1666fecc7.dll
Resource
win7-20240903-en
Target
875b2e19f2f6be613a643c4e600e1b822157499ad3b4c62cdf4aeae1666fecc7
Size
688KB
MD5
5d441694a83f37144335ccf6cf3ef79b
SHA1
089139f16273ec4b133c70e0d8d92348667778b6
SHA256
875b2e19f2f6be613a643c4e600e1b822157499ad3b4c62cdf4aeae1666fecc7
SHA512
eaabc984daa73b210ffcb1a78f4812b5186d6be9f9e7e19899b98fea0f5f3fb8653d507325020b08215cdcbd7b7cf05f66a8aa78a975a1e6117f62c60446f3f5
SSDEEP
12288:Gfndx6M581WsGRouyjzC6gn5l0H1Tak8jnGg/xeq7gz3xfsPEb4sk:odAE81W381Wk8jnYz3dsPEb4s
Checks for missing Authenticode signature.
Processes:
resource |
---|
875b2e19f2f6be613a643c4e600e1b822157499ad3b4c62cdf4aeae1666fecc7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
UrlUnescapeW
StrTrimW
MprAdminInterfaceTransportAdd
AssociateColorProfileWithDeviceW
ldiv
SetWindowExtEx
DeleteColorSpace
CreateMetaFileA
CreateDiscardableBitmap
CopyEnhMetaFileW
GetRegionData
UuidIsNil
RpcBindingSetAuthInfoA
GetUrlCacheEntryInfoW
CryptCATPutAttrInfo
SetupLogErrorW
SetupDiSetSelectedDriverA
HICON_UserMarshal
NetShareGetInfo
VarDateFromCy
EnumTimeFormatsA
GetLastError
CloseHandle
QueueUserWorkItem
SetEvent
GetNLSVersion
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ