BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.24b3662f71b0901db219c2c6696ec4c0.dll
Resource
win7-20230831-en
Target
NEAS.24b3662f71b0901db219c2c6696ec4c0.exe
Size
291KB
MD5
24b3662f71b0901db219c2c6696ec4c0
SHA1
16383ecab0fb4170332f49a898f9561d25ea6804
SHA256
1f9acbfdedcbfcdbbee506bc35c5e1cda00b777e139c6a653e175912925779cd
SHA512
5d639c16f57387f7fcf8ee9fb3120d5ee228d2b65a14347626b5a1be9eef9995f871c8ad1d0c7a277365e26cd30965ae6bf6a30aaf9522b22f5c65e2f6c07869
SSDEEP
6144:lOp8HpzdQOStKaTM3Vi8cGfJzAcpqAxh5Nyr7:lOp8Hpz7SMsHWJMWqah5E7
Checks for missing Authenticode signature.
resource |
---|
NEAS.24b3662f71b0901db219c2c6696ec4c0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryPerformanceCounter
GetSystemTimeAsFileTime
CloseHandle
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
malloc
free
fseek
ftell
feof
ferror
fread
fflush
fclose
fwrite
fopen
__RTDynamicCast
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_purecall
??3@YAXPAX@Z
memset
strlen
memcpy
qsort
log
strcmp
_CxxThrowException
__CxxFrameHandler3
_unlock
BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE