DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.715426dee17f9dba932b96009ee38cc0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.715426dee17f9dba932b96009ee38cc0.dll
Resource
win10v2004-20230915-en
Target
NEAS.715426dee17f9dba932b96009ee38cc0.exe
Size
152KB
MD5
715426dee17f9dba932b96009ee38cc0
SHA1
686772f1754ebaef85c4800d0d4435f9ec3ffc68
SHA256
21c489118587b1021418627402b8f2b5457eb55593f22c0f6d69ac74218df3c6
SHA512
9971f22d579718b144f53fe85f855677ab2d7b9df768f3d2ae0d6493ddb40aa4b87c971a7624c704fa5b7af8847fc22ddf43d59593c0da92f4606285e3a776fe
SSDEEP
3072:IlJ3GuUki2smPYXMOJbypYMBe6Vg4dQu8S8/FsX:IlkF2sEOJby+MBe6V9qun
Checks for missing Authenticode signature.
resource |
---|
NEAS.715426dee17f9dba932b96009ee38cc0.exe |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCreateKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegDeleteKeyA
GetDeviceCaps
DeleteCriticalSection
GetLastError
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
lstrlenW
GetModuleHandleA
SetLastError
CompareStringA
CreateFileA
CreateFileW
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
lstrcpynW
GlobalAddAtomA
GlobalAddAtomW
LoadLibraryA
LoadLibraryW
lstrcatW
lstrcmpiA
lstrcmpiW
lstrcpyW
IsBadReadPtr
GetVersionExW
GetShortPathNameA
GetShortPathNameW
CompareStringW
CreateMutexA
CreateMutexW
GetDriveTypeA
GetDriveTypeW
lstrlenA
QueryDosDeviceA
QueryDosDeviceW
CloseHandle
SetErrorMode
DeviceIoControl
GetVersion
GetExitCodeThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
FreeLibrary
GetProcAddress
RaiseException
GlobalDeleteAtom
SetProcessWorkingSetSize
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WNetGetConnectionA
WNetCancelConnection2W
WNetAddConnection2W
WNetGetConnectionW
_wcsicmp
_vsnwprintf
iswspace
_wtol
wcspbrk
iswdigit
_wtoi
wcsstr
wcschr
_wcsnicmp
wcsrchr
memmove
wcslen
wcsncmp
towupper
_purecall
_snwprintf
wcsncpy
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
wcscmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_beginthreadex
OleLockRunning
CoTaskMemFree
StringFromCLSID
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
CreateStreamOnHGlobal
CoMarshalInterface
CoUnmarshalInterface
VariantInit
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocStringLen
VariantCopy
VariantChangeType
ShellExecuteExA
PathGetCharTypeW
PathGetCharTypeA
EndPaint
DestroyAcceleratorTable
BeginPaint
GetClientRect
InvalidateRgn
InvalidateRect
SetFocus
GetFocus
SendMessageA
SendMessageTimeoutA
GetDesktopWindow
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
FindWindowA
FindWindowW
GetClassLongA
GetClassNameA
GetClassNameW
GetWindowLongA
GetWindowLongW
GetWindowTextA
IsWindow
DestroyWindow
LoadCursorA
LoadCursorW
LoadStringA
LoadStringW
MessageBoxW
PostMessageA
PostMessageW
RegisterClassA
RegisterClassW
UnregisterClassA
UnregisterClassW
RegisterWindowMessageA
SendMessageW
SetWindowLongA
SetWindowLongW
CharNextW
CreateAcceleratorTableA
CreateAcceleratorTableW
GetWindowThreadProcessId
GetAsyncKeyState
CharNextA
GetDC
ReleaseDC
GetWindowTextW
ShowWindow
SetLayeredWindowAttributes
FillRect
GetTopWindow
GetWindow
GetWindowRect
EqualRect
SetRect
UnregisterHotKey
SetTimer
KillTimer
SetWindowPos
RegisterHotKey
IsIconic
GetParent
IsWindowVisible
GetCursorPos
SetForegroundWindow
EnumWindows
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ