GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d62e58f7b4f42d8bffc94062920233a0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d62e58f7b4f42d8bffc94062920233a0.dll
Resource
win10v2004-20230915-en
Target
NEAS.d62e58f7b4f42d8bffc94062920233a0.exe
Size
526KB
MD5
d62e58f7b4f42d8bffc94062920233a0
SHA1
f60795e5b58f96591ce20d2c82825fcaf8eff249
SHA256
2782a3ee3503974670d836ae3ff88271b2b3c5c713617d438c87bdef530318d4
SHA512
d9ee6895b89d97b37990ea462bc9638d23f0121c77c3b5f6c6128e01e720520435ca137f13557d1c490b6401466e2bb61be287c42ca8c5aeb837e49650dc75d2
SSDEEP
12288:F6dWZSCDTF7IqvGy+65Xl4WErwgSPh1Ko4S2nA1imjCeW:sdWYCDTSOl+65jPLbz2n+inn
Checks for missing Authenticode signature.
resource |
---|
NEAS.d62e58f7b4f42d8bffc94062920233a0.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddVectoredExceptionHandler
CloseHandle
CompareStringW
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SwitchToThread
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx
EnumThreadWindows
wsprintfA
SysFreeString
GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ