Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3448a55cbfedc025351abe70c4e427f0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3448a55cbfedc025351abe70c4e427f0.dll
Resource
win10v2004-20230915-en
Target
NEAS.3448a55cbfedc025351abe70c4e427f0.exe
Size
248KB
MD5
3448a55cbfedc025351abe70c4e427f0
SHA1
40e56925b09200a6c22b2bb76ac54dd1ab36ee51
SHA256
9d06e68d81bbb5b592281729eb5d16b5b1ef68b1d524fe349f9f3a46733482f6
SHA512
1cbb22da79c7ea799f44205f14e9516e7c952c3941caac29ce9b3e46a9a2ac596478a70e0fb991a39a3ded1bc050f2d985cd00cecb854c7ccc7dc3da85a5fbae
SSDEEP
6144:2a+u6iQX4fS0Et7LVy85B29OGE4wCvBB7ZEwYaku+PTAOfzQfVx:2aCVy85BiOGEfwT7ZEwYvLYfVx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetFilePathNewName@BASUtilityFile@@SAPA_WPB_W@Z
?ToString@AssJsonUtil@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@@Z
?PushJsonArrayStringValue@AssJsonUtil@@SAXAAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@AAV?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@3@PBD@Z
?GetFileSize@BASUtilityFile@@SA_JPB_W@Z
?CalcFileMD5@BASUtilityFile@@SAPADPBD@Z
?GetTaskId@DhTask@@QAEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetTaskData@DhTask@@QAEPAV?$shared_ptr@X@tr1@std@@XZ
?SetTaskData@DhTask@@QAEXPAV?$shared_ptr@X@tr1@std@@@Z
?SetTaskFunc@DhTask@@QAEXPAV?$function@$$A6AXV?$shared_ptr@VDhTask@@@tr1@std@@@Z@tr1@std@@@Z
?NotifySchedular@DhTask@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@W4DhTaskStatus1@@@Z
?AddJsonDictStringValue@AssJsonUtil@@SAXAAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@AAV?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@3@PBD2@Z
?AddJsonDictInt64Value@AssJsonUtil@@SAXAAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@AAV?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@3@PBD_J@Z
?AddJsonDictIntValue@AssJsonUtil@@SAXAAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@AAV?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@3@PBDH@Z
?IsFileExist@BASUtilityFile@@SA_NPB_W@Z
?AddJsonDictObjectValue@AssJsonUtil@@SAXAAV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@AAV?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@3@PBD0@Z
??1DhTask@@UAE@XZ
??0DhTask@@QAE@XZ
?FindTask@DhTaskSchedular@@QAE?AV?$shared_ptr@VDhTask@@@tr1@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?PostTask@DhTaskSchedular@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@@Z
?ConvertUtf8ToUnicode@BASUtilityString@@SAPA_WPBD@Z
?ConvertUnicodeToUtf8@BASUtilityString@@SAPADPB_W@Z
?ResetFunc@DhTask@@QAEXXZ
?GetProductPluginsDir@BASUtilityApp@@SAPA_WXZ
?GetProductBinDir@BASUtilityApp@@SAPA_WXZ
?GetTaskId@BASUtilityApp@@SA_JXZ
?SetTaskId@DhTask@@QAEX_J@Z
?Free@BASUtilityString@@SAXPAX@Z
?Get@DhTaskSchedular@@SAPAV1@XZ
??1LocalPool@AutoRelease@@QAE@XZ
??0LocalPool@AutoRelease@@QAE@XZ
?AddPoolObject@AutoRelease@@CAXPAXPBDHW4AutoReleaseObjectType1@1@@Z
?PostTaskEvent@DhTaskSchedular@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@@Z
?RemovePoolObject@AutoRelease@@CAXPAX@Z
?AddObject@AutoRelease@@SAXV?$shared_ptr@X@tr1@std@@PBDH@Z
??1AutoRelease@@QAE@XZ
?FindPackage@DhTaskSchedular@@QAE?AV?$shared_ptr@VDhTask@@@tr1@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?RegisterTaskEvent@DhTaskSchedular@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@@Z
?FindCurrentTasks@DhTaskSchedular@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@PAV?$vector@V?$shared_ptr@VDhTask@@@tr1@std@@V?$allocator@V?$shared_ptr@VDhTask@@@tr1@std@@@3@@4@@Z
??0DhTaskEvent@@QAE@XZ
??1DhTaskEvent@@UAE@XZ
?AddPackage@DhTaskEvent@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@@Z
??0DhTaskPackage@@QAE@XZ
??1DhTaskPackage@@UAE@XZ
?AddTask@DhTaskPackage@@QAEXAAV?$shared_ptr@VDhTask@@@tr1@std@@@Z
??0AutoRelease@@QAE@XZ
pthread_mutex_lock
pthread_mutex_init
pthread_detach
pthread_mutex_unlock
pthread_create
?CreateServer@IPCChannel@bas@@QAEPAUIPCSocket1@@HPBD@Z
?GetFreeNativePort@IPCChannel@bas@@SAHXZ
?WritePacket@IPCPacketChannel@bas@@QAE_NPAUIPCPacket1@@@Z
?Close@IPCPacketChannel@bas@@UAEXXZ
??0IPCPacketChannel@bas@@QAE@XZ
??1IPCPacketChannel@bas@@UAE@XZ
?ProcessReceiveData@IPCPacketChannel@bas@@UAEXPAUIPCSocket1@@PBDH@Z
ord8
ord19
ord6
ord22
ord4
ord20
SHCreateDirectoryExW
PathFindFileNameW
??0LogMessage@google@@QAE@PBDH@Z
??1LogMessage@google@@QAE@XZ
?stream@LogMessage@google@@QAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?WStringToUtf8@Helper@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z
?Utf8ToWString@Helper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBD@Z
?IsOsVersion8OrGreater@Helper@@SA_NXZ
?Is64BitWindows@Helper@@SA_NXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
_fileno
fwrite
longjmp
atoi
_setjmp3
tolower
strrchr
memchr
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_strdup
_wcsdup
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
_chsize_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_atoi64
memmove
_wtoi
wcsrchr
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_wfopen
fread
fseek
fclose
sprintf_s
free
malloc
_wassert
realloc
VariantClear
Process32NextW
SetFileTime
TzSpecificLocalTimeToSystemTime
LocalFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
CreateToolhelp32Snapshot
SystemTimeToFileTime
Process32FirstW
GetStartupInfoW
CreateProcessW
Sleep
DeleteFileW
MoveFileW
GetCurrentProcessId
CloseHandle
GetDiskFreeSpaceExW
CreateFileW
RegisterModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ