NP_AcrobatProtectedInitialize
NP_ApolloEntry
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.654fb8ecea73d9a67ede34e92a45f4c0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.654fb8ecea73d9a67ede34e92a45f4c0.dll
Resource
win10v2004-20230915-en
Target
NEAS.654fb8ecea73d9a67ede34e92a45f4c0.exe
Size
525KB
MD5
654fb8ecea73d9a67ede34e92a45f4c0
SHA1
2d27075917efc97ac5d0901142826f9cc0ce4c33
SHA256
5cb2c0c16f9ca612b9b3a2c36d0bf6e18408e198e83917de8460ca31acfe6c71
SHA512
0e50bef007b32605e5bb9684c2e96b91dfc84a0368ba0a4f24d48b2175f8bef72675c8d96a10a91497b46f171bce3410951598c7e432e4a326631cc8a1dbe23f
SSDEEP
12288:+0OHL8TMIEC9XK6KBV2sGHFUQQ+wHOMoL8s/7YaNqY2HVXZ:bOHL8TMIE4XK64VfGHFHwHVQ/DNGZ
Checks for missing Authenticode signature.
resource |
---|
NEAS.654fb8ecea73d9a67ede34e92a45f4c0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetWindowTheme
GetProcAddress
LoadLibraryA
LoadLibraryW
DeleteFileA
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
OpenFile
CopyFileA
GetVolumeInformationW
WriteFile
SetNamedPipeHandleState
OpenMutexW
GetTickCount
lstrlenW
FreeLibrary
LoadLibraryExA
GetFileAttributesW
GetLongPathNameW
RaiseException
InitializeCriticalSectionEx
GetVersionExW
GetTempPathW
GetModuleHandleW
VirtualQuery
CreateDirectoryA
CreateFileA
SetFilePointer
QueryPerformanceCounter
GetLocalTime
SetLastError
CallNamedPipeW
GetCurrentProcess
LocalFree
GetModuleHandleA
GetSystemDirectoryA
FindClose
FindFirstFileW
GetExitCodeProcess
GetCurrentThreadId
SetThreadPriority
CreateProcessW
GetThreadId
OpenProcess
lstrcpyW
CreateSemaphoreA
GetModuleHandleExW
VerSetConditionMask
VerifyVersionInfoW
GetFileType
TransactNamedPipe
WaitNamedPipeW
ResetEvent
CreateMutexW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
GetCurrentProcessId
GetLastError
CloseHandle
GetModuleFileNameW
ResumeThread
TerminateThread
ExitThread
CreateThread
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
InitializeCriticalSection
OutputDebugStringA
ReadFile
GetFileSize
CreateFileW
VirtualProtect
GetSystemInfo
GetWindowThreadProcessId
EnumWindows
GetWindow
GetParent
GetDesktopWindow
SetWindowLongA
GetWindowLongA
ClientToScreen
IsWindowUnicode
PostQuitMessage
DispatchMessageW
GetMessageW
GetMessageA
FindWindowW
MsgWaitForMultipleObjects
GetActiveWindow
WaitForInputIdle
wsprintfW
GetAncestor
CreateWindowExW
FindWindowA
SendMessageA
RegisterWindowMessageA
SetCursor
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetForegroundWindow
GetSubMenu
LoadMenuA
GetFocus
IsChild
CallWindowProcA
LoadStringW
LoadStringA
DestroyCursor
LoadCursorA
MessageBoxA
KillTimer
SetTimer
SetFocus
SystemParametersInfoA
GetClassNameA
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
InvalidateRect
GetWindowRgn
SetWindowRgn
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
GetDlgItem
EndDialog
CreateDialogParamA
IsWindowVisible
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
DefWindowProcA
PostMessageW
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
PlayEnhMetaFile
GetEnhMetaFileA
DeleteEnhMetaFile
GetDeviceCaps
Escape
SetTextColor
SetBkColor
GetStockObject
FillRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
LPtoDP
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
GetTokenInformation
OpenProcessToken
RegEnumKeyExW
CoTaskMemFree
CoCreateInstance
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?id@?$ctype@G@std@@2V0locale@2@A
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?widen@?$ctype@G@std@@QBEGD@Z
wcsrchr
__std_terminate
memcmp
memcpy
wcsstr
_except_handler4_common
memmove
memset
__std_type_info_destroy_list
__std_exception_destroy
memchr
_CxxThrowException
__std_exception_copy
strstr
strrchr
strchr
_purecall
__CxxFrameHandler3
_initterm_e
_initterm
terminate
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
_crt_atexit
_execute_onexit_table
_set_invalid_parameter_handler
_cexit
_seh_filter_dll
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
strcpy_s
tolower
strcat
strcmp
_stricmp
strncmp
wcsncpy_s
_strnicmp
strlen
strcpy
wcslen
strncpy
_wcsnicmp
towlower
_wcslwr_s
strcat_s
iswdigit
wcscat
wcstok_s
wcsncat_s
wcscpy_s
wcscat_s
_wcsdup
_wcsicmp
wcsncmp
tmpfile
__stdio_common_vsnwprintf_s
fwrite
fseek
fread
fopen
fclose
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf_s
__stdio_common_vfwscanf
_wfopen_s
localeconv
setlocale
calloc
_callnewh
malloc
free
_wtof
_wtol
wcstol
_itow_s
_itoa
_wsplitpath_s
_unlink
_waccess_s
_wmakepath_s
_mbscmp
_time64
_wgetenv
_wputenv_s
_except1
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
SHGetFolderPathA
NP_AcrobatProtectedInitialize
NP_ApolloEntry
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ