GetFilterInfo
GetFilterPref
ImportGr
RegisterPercentCallback
SetFilterPref
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.302b51e1c3237871c7ffad1c7e1d74b0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.302b51e1c3237871c7ffad1c7e1d74b0.dll
Resource
win10v2004-20230915-en
Target
NEAS.302b51e1c3237871c7ffad1c7e1d74b0.exe
Size
793KB
MD5
302b51e1c3237871c7ffad1c7e1d74b0
SHA1
39e5b12496aa741eb70289008cb51b687147a3a2
SHA256
5f35a5886de213fff432a7fdde6eba00e151017c314e920e1fdf437ddcceeedd
SHA512
1d275f5a1dc1f06b10390bc11f92e712a48d1ab9e1f78ffa3ecbb44775fc3e6b9c9191c5d777a39bda76f89fbd13823f3d3b0200ccef1bd0b333b5a6b1191b7c
SSDEEP
24576:JmflToA+gHVByS4EU1GyhjyeBIAvi1Sj8gX4V3:JmflToWByS4EHyhrHnj7X45
Checks for missing Authenticode signature.
resource |
---|
NEAS.302b51e1c3237871c7ffad1c7e1d74b0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteObject
GetCurrentPositionEx
GetDeviceCaps
GetStockObject
GetTextExtentPoint32A
Rectangle
SelectClipRgn
ExtSelectClipRgn
SelectObject
SetTextColor
CloseEnhMetaFile
CreateEnhMetaFileA
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetWorldTransform
SetWorldTransform
SelectClipPath
SetMiterLimit
StrokeAndFillPath
StrokePath
ExtCreatePen
CreateFontIndirectA
GetOutlineTextMetricsA
MoveToEx
SetTextAlign
GetTextMetricsA
TextOutA
GetTextFaceA
StretchDIBits
CloseMetaFile
CreateMetaFileA
PolyPolygon
SetBkMode
SetROP2
SetStretchBltMode
GetPath
WidenPath
Polyline
SetWindowExtEx
SetWindowOrgEx
GetTextExtentPointA
DeleteMetaFile
CreateBitmap
CreateCompatibleDC
DeleteDC
GetDIBits
GetGlyphOutlineA
GetCharacterPlacementA
SetMapMode
PolyDraw
EndPath
CloseFigure
BeginPath
SetPolyFillMode
GdiComment
SetGraphicsMode
Escape
GetTickCount
MapViewOfFileEx
UnmapViewOfFile
CreateFileMappingA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
RaiseFailFastException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryA
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
WerRegisterMemoryBlock
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
HeapSetInformation
GetProcessHeap
QueryPerformanceCounter
IsProcessorFeaturePresent
GetLastError
GetProcAddress
GetModuleHandleW
FreeLibrary
MulDiv
CloseHandle
SetFilePointer
ReadFile
GetFileSize
CreateFileA
RaiseException
GetSystemInfo
_CIatan2
_CIlog
_CIlog10
memchr
strchr
atof
longjmp
_setjmp3
_finite
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
ceil
rand
_invalid_parameter_noinfo_noreturn
_CIpow
memcpy_s
_time64
srand
strstr
isalnum
isdigit
islower
isupper
_msize
_expand
realloc
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memcmp
??2@YAPAXI@Z
memset
memmove
__CxxFrameHandler3
??3@YAXPAX@Z
memcpy
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_CxxThrowException
_CItan
_CIsin
malloc
free
exit
_vsnprintf
fprintf
__iob_func
_CIcos
EventWrite
GetFilterInfo
GetFilterPref
ImportGr
RegisterPercentCallback
SetFilterPref
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ