DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
Start
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
Updater.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Updater.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
launcher.bat
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
launcher.bat
Resource
win10v2004-20241007-en
Target
08112024_0342_Updater.zip
Size
64KB
MD5
e9a3d1601821ba17587b12f1fad693b2
SHA1
9f83e29974fdac8c0eb37dc10155502ac1c8a4db
SHA256
c4e9ccca525c21d719b3ee8547e84934942d1d18cd96374eb61c2e99cdd7f103
SHA512
bb22f6d7b888cdc19a6204b9205863850bbf6b67715528a6aafe62876009da6b181e267fbc604c9a289774f9049a93ede91bb6825320f43349f3985ed3060dba
SSDEEP
1536:fT4pMmJHW9tElNSnU2vl7Ws7RtUkr04b4jYI:MSC28lNP2d7WgRNb+YI
warmcookie
65abfc80-a660-4691-a919-130dc9b75b98
Checks for missing Authenticode signature.
resource |
---|
unpack001/Updater.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateThread
GetLastError
SetLastError
ExpandEnvironmentStringsW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
GetVolumeInformationW
ReadFile
RemoveDirectoryW
SetFilePointer
WriteFile
SetHandleInformation
CreatePipe
PeekNamedPipe
WaitForSingleObject
Sleep
OpenMutexW
TerminateProcess
CreateProcessW
GlobalMemoryStatusEx
GetTickCount
GetComputerNameExW
GetModuleFileNameW
GetComputerNameW
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetTempFileNameW
GetTempPathW
GetSystemDirectoryW
LocalFree
CloseHandle
LoadLibraryW
GetProcAddress
GetModuleHandleW
CreateMutexW
GetSystemInfo
HeapSize
OutputDebugStringW
WriteConsoleW
SetStdHandle
LoadLibraryExW
LCMapStringW
FlushFileBuffers
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
GetUserNameW
SHGetFolderPathW
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
SysAllocString
SysFreeString
VariantInit
VariantClear
WSAStartup
gethostbyname
inet_ntoa
gethostname
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ