DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
1f532e2e68be330d950a2a4ab4b81eb731ca8d400304c1e4c2cc57d12614fb28.dll
Resource
win7-20240903-en
Target
1f532e2e68be330d950a2a4ab4b81eb731ca8d400304c1e4c2cc57d12614fb28
Size
939KB
MD5
d195b5e53864281cc4abc34a66871110
SHA1
8a15dc301c2938740effbd3faa8ea6ce38e51b63
SHA256
1f532e2e68be330d950a2a4ab4b81eb731ca8d400304c1e4c2cc57d12614fb28
SHA512
ea8bc93b7cc0b83fd59dcb65815fe7f205eb828c273aeb7b67913c421c0f88d5d09982f054e93f0b50cec61c55e327491fbad52cea8e7b6c010c14629368f297
SSDEEP
12288:kvyPTUfrN+lSDLV9dRCYFdVlv6jVBv4w8N6zTlvdEywUshhxmassuqvY/J9ujv7X:k6Ufgl15qhxmLqvY2leXA
Checks for missing Authenticode signature.
resource |
---|
1f532e2e68be330d950a2a4ab4b81eb731ca8d400304c1e4c2cc57d12614fb28 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ord150
ord111
ord110
ord107
ord3
ord14
ord15
ord16
ord1
ord2
ord9
FlushFileBuffers
SetStdHandle
SetFilePointerEx
EncodePointer
DecodePointer
RaiseException
GetLastError
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
VirtualAlloc
DisableThreadLibraryCalls
WriteFile
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
GetFileSizeEx
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
CloseHandle
CreateFileW
WriteConsoleW
FreeLibrary
SetUnhandledExceptionFilter
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
ShowWindow
CharNextW
UnregisterClassW
MessageBoxA
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
StringFromGUID2
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ