CAPT_AddFwExceptions
CAPT_AddFwExceptionsEx
CAPT_FwExceptionsIsEnabled
CAPT_FwExceptionsIsEnabledEx
CAPT_FwIsEnabled
CAPT_GetOsInfo
CAPT_RemoveFwExceptions
CAPT_RemoveFwExceptionsEx
IsWow64
MakePathToRPCS
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e408c8dd659689aa421da34cfe55f5019c21d601b28fb3ef8b6bc0c7e4a8e835.dll
Resource
win7-20240903-en
Target
e408c8dd659689aa421da34cfe55f5019c21d601b28fb3ef8b6bc0c7e4a8e835
Size
96KB
MD5
799ce61626cffcac92f8db6c52a74bd3
SHA1
3f2e8e0a730a8cbbf27618d6a0068d6ebc54aaef
SHA256
e408c8dd659689aa421da34cfe55f5019c21d601b28fb3ef8b6bc0c7e4a8e835
SHA512
a888c4c24b2363a1f4705242ffb291ebdb701af51b7652c175480ec794aaf8b5a2ea22e1baeebe4e8bf4679ef3d17c23be6aedd4c542108a0803101df6baaec8
SSDEEP
1536:zC/TB2UeZVfNjkkvVDslApxXUWqcNQyxLWpSAjZRJuV:mQX3fNjbpslsUWqeQfp7jr
Checks for missing Authenticode signature.
resource |
---|
e408c8dd659689aa421da34cfe55f5019c21d601b28fb3ef8b6bc0c7e4a8e835 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleW
GetCurrentProcess
lstrcpyW
lstrcatW
GetSystemWindowsDirectoryW
lstrlenW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
RtlUnwind
CoUninitialize
CoCreateInstance
CoInitializeEx
SysAllocString
SysStringLen
SysFreeString
CAPT_AddFwExceptions
CAPT_AddFwExceptionsEx
CAPT_FwExceptionsIsEnabled
CAPT_FwExceptionsIsEnabledEx
CAPT_FwIsEnabled
CAPT_GetOsInfo
CAPT_RemoveFwExceptions
CAPT_RemoveFwExceptionsEx
IsWow64
MakePathToRPCS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE