CPlApplet
DllMain
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.06d6b9e51cc717c7e62f670b03d07b30_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.06d6b9e51cc717c7e62f670b03d07b30_JC.dll
Resource
win10v2004-20230915-en
Target
NEAS.06d6b9e51cc717c7e62f670b03d07b30_JC.exe
Size
388KB
MD5
06d6b9e51cc717c7e62f670b03d07b30
SHA1
5bb6f36ccdbda3ca9a6e22703b24b5cf40705f0d
SHA256
4108146c9d0cf59518e7ba8efadbb07b0b1c0afd3854146b367aec99902eb4de
SHA512
f717d4d9337d3231abeeb4946713ef67cd0042a95084ea44a5803f121d3368dbc60d498b31f5b1ecd15d0516cd2d9a473ca171cc8f480ed3a3b6077184e19746
SSDEEP
6144:suiQah7ZiXfJ3xZv/z4j01TyxNdNK28yHmQYpnL0iz7GcLH16h7Go7O:sWalUXfJ3HvEjCTKvIltpndKcUkGO
Checks for missing Authenticode signature.
resource |
---|
NEAS.06d6b9e51cc717c7e62f670b03d07b30_JC.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
CloseDesktop
OpenInputDesktop
LoadStringA
wsprintfA
GetShellWindow
GetWindowThreadProcessId
HeapAlloc
LoadLibraryW
CompareStringW
FlushFileBuffers
WriteConsoleW
GetProcAddress
GetModuleHandleA
InterlockedIncrement
GlobalMemoryStatusEx
GetVersionExA
VerifyVersionInfoA
VerSetConditionMask
GetCurrentProcess
GetNativeSystemInfo
CloseHandle
GlobalFree
LocalFree
GlobalAlloc
GetLastError
CreateFileA
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
CreateProcessA
WaitForSingleObject
lstrlenA
GetEnvironmentVariableA
GetWindowsDirectoryA
LocalAlloc
FormatMessageA
WTSGetActiveConsoleSessionId
GetLongPathNameA
GetShortPathNameA
GetModuleFileNameA
InterlockedDecrement
GetTempPathA
GetLocalTime
OpenProcess
lstrcatA
SetEvent
OpenEventA
OutputDebugStringA
GetCurrentProcessId
GetCurrentThreadId
InterlockedExchange
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
RtlUnwind
GetDriveTypeW
FindFirstFileExW
HeapFree
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
DecodePointer
GetCommandLineA
GetConsoleMode
EncodePointer
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LCMapStringW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCurrentDirectoryW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameW
CreateFileW
InitializeCriticalSectionAndSpinCount
HeapCreate
HeapDestroy
ExitProcess
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoW
SetEnvironmentVariableW
SetEnvironmentVariableA
Sleep
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteFile
GetModuleFileNameW
HeapSize
GetStringTypeW
SetStdHandle
GetConsoleCP
HeapReAlloc
StringFromCLSID
CoTaskMemFree
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString
VariantClear
CPlApplet
DllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ