CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5c31a1991b83b16d620785baf2e328b49cc684886f0682cfefc934c0f8762e93.dll
Resource
win7-20240903-en
Target
5c31a1991b83b16d620785baf2e328b49cc684886f0682cfefc934c0f8762e93
Size
788KB
MD5
57ff8aad6421b8785d191a75825a457d
SHA1
7991ebfc143d958342135a84297ee949ef110f2a
SHA256
5c31a1991b83b16d620785baf2e328b49cc684886f0682cfefc934c0f8762e93
SHA512
ec22ac2a7f68eb08b253a75efa75ca5d7dda6c726bc24f799556dd88f1347066c9a36ee683c8e77fef0cc42b0a86c4cbd6caabcf432134b63e815601b76fb908
SSDEEP
24576:9WyoyFMVMKkN3ZvxEhb0IsaQ4KriCo0j6Ij:oSuVMK6vx2RsIKNrj
Checks for missing Authenticode signature.
resource |
---|
5c31a1991b83b16d620785baf2e328b49cc684886f0682cfefc934c0f8762e93 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleFileNameExW
GetWindowsAccountDomainSid
EnumServicesStatusW
DeleteService
GetFileSecurityW
InitializeSecurityDescriptor
GetFontData
GetRandomRgn
GetPrinterDataExW
DeletePrinterConnectionW
DeletePrinterDriverW
WriteProcessorPwrScheme
ExtractAssociatedIconW
FaultInIEFeature
system
vfwprintf
ungetwc
fwprintf
memset
strncmp
srand
GetUrlCacheEntryInfoA
FindCloseUrlCache
ChildWindowFromPointEx
DdeUnaccessData
GetScrollPos
GetKeyState
GetWindow
GetFocus
GetDlgItemInt
GetMenu
DrawStateA
GetMenuBarInfo
GetKeyboardLayout
GetMenuItemInfoW
GetSystemMenu
FillRect
GetSysColor
LoadBitmapW
GetOpenClipboardWindow
GetMenuState
InitializeSecurityContextW
lstrcmpiW
GetErrorMode
IsProcessorFeaturePresent
GetCurrentConsoleFontEx
SetConsoleDisplayMode
GetConsoleWindow
FileTimeToDosDateTime
SetProcessAffinityMask
SetHandleCount
GetLastError
GetBinaryTypeW
GetCurrentProcess
GetLocaleInfoA
GetCurrentConsoleFont
FindResourceA
FormatMessageA
LocalAlloc
FileTimeToSystemTime
GetStringTypeExW
DebugActiveProcess
LockFile
GetAtomNameW
LocalSize
GetVolumePathNamesForVolumeNameW
VirtualProtect
GlobalFree
GetFileAttributesW
GetShortPathNameW
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ