acrxEntryPoint
acrxGetApiVersion
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fc3c4cf099b969493ca0d5a852509bd0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.fc3c4cf099b969493ca0d5a852509bd0.dll
Resource
win10v2004-20230915-en
Target
NEAS.fc3c4cf099b969493ca0d5a852509bd0.exe
Size
72KB
MD5
fc3c4cf099b969493ca0d5a852509bd0
SHA1
919d8ad0b459de5a49f4d3f8df768a1e3282d396
SHA256
6f32e6f806fa632eabb3a668ce7b0db40ea25564acf3489a6227e4213b583519
SHA512
d42c2fc5a2751592dfafa020a29c93628c3ca8e0c21a66a1d33cf8ff92e49e9584276a0ec217cd75e7b303bc09a0ca26da1369ea755d4d020e247c49e8537cef
SSDEEP
384:Iign8pJSwFc0GFWqTjX4W6vGJvAIpTm+vYTpJrT900RMAQ/HIjCSzMzd2Vbik2/7:ICpJRFch9jlmClLgrq0/QQWTdUek2/V
Checks for missing Authenticode signature.
resource |
---|
NEAS.fc3c4cf099b969493ca0d5a852509bd0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
lstrlenW
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
FreeLibrary
GetModuleFileNameA
GetProcAddress
GetLastError
LoadLibraryA
GetSystemDirectoryA
GetTempPathA
GetVersion
DeleteFileA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
wsprintfA
ShellExecuteA
?beginInsert@AcRxEventReactor@@UAEXPAVAcDbDatabase@@PBD0@Z
?otherInsert@AcRxEventReactor@@UAEXPAVAcDbDatabase@@AAVAcDbIdMapping@@0@Z
?beginInsert@AcRxEventReactor@@UAEXPAVAcDbDatabase@@ABVAcGeMatrix3d@@0@Z
?dxfOutComplete@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?abortDxfOut@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?beginDxfOut@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?dxfInComplete@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?abortDxfIn@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?beginDxfIn@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?abortSave@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?saveComplete@AcRxEventReactor@@UAEXPAVAcDbDatabase@@PBD@Z
?beginSave@AcRxEventReactor@@UAEXPAVAcDbDatabase@@PBD@Z
?desc@AcRxDynamicLinker@@SAPAVAcRxClass@@XZ
acrxSysRegistry
?acrxBuildClassHierarchy@@YAXXZ
?newIterator@AcDbBlockTable@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTableIterator@@_N1@Z
?done@AcDbSymbolTableIterator@@QBE_NXZ
?getRecord@AcDbBlockTableIterator@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?isLayout@AcDbBlockTableRecord@@QBE_NXZ
?newIterator@AcDbBlockTableRecord@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTableRecordIterator@@_N1@Z
?start@AcDbBlockTableRecordIterator@@QAEX_N0@Z
?done@AcDbBlockTableRecordIterator@@QBE_NXZ
?getEntity@AcDbBlockTableRecordIterator@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbEntity@@W4OpenMode@AcDb@@_N@Z
?erase@AcDbObject@@QAE?AW4ErrorStatus@Acad@@H@Z
?step@AcDbBlockTableRecordIterator@@QAEX_N0@Z
?step@AcDbSymbolTableIterator@@QAEX_N0@Z
??0AcDbText@@QAE@XZ
?abortInsert@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?endInsert@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?wblockNotice@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?beginWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@0@Z
?beginWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@0VAcDbObjectId@@@Z
?beginWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@0AAPBVAcGePoint3d@@@Z
?otherWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@AAVAcDbIdMapping@@0@Z
?abortWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?endWblock@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?beginWblockObjects@AcRxEventReactor@@UAEXPAVAcDbDatabase@@AAVAcDbIdMapping@@@Z
?beginDeepClone@AcRxEventReactor@@UAEXPAVAcDbDatabase@@AAVAcDbIdMapping@@@Z
?beginDeepCloneXlation@AcRxEventReactor@@UAEXAAVAcDbIdMapping@@PAW4ErrorStatus@Acad@@@Z
?abortDeepClone@AcRxEventReactor@@UAEXAAVAcDbIdMapping@@@Z
?endDeepClone@AcRxEventReactor@@UAEXAAVAcDbIdMapping@@@Z
?partialOpenNotice@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?freeRawMem@AcHeapOperators@@CIXPAX@Z
?allocRawMem@AcHeapOperators@@CIPAXI@Z
?getSymbolTable@AcDbDatabase@@QAE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTable@@W4OpenMode@AcDb@@@Z
?getAt@AcDbBlockTable@@QBE?AW4ErrorStatus@Acad@@PBDAAPAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?appendAcDbEntity@AcDbBlockTableRecord@@QAE?AW4ErrorStatus@Acad@@PAVAcDbEntity@@@Z
?close@AcDbObject@@QAE?AW4ErrorStatus@Acad@@XZ
acutPrintf
?setTextString@AcDbText@@QAE?AW4ErrorStatus@Acad@@PBD@Z
?setHeight@AcDbText@@QAE?AW4ErrorStatus@Acad@@N@Z
??0AcRxObject@@IAE@XZ
?isA@AcRxEventReactor@@UBEPAVAcRxClass@@XZ
?clone@AcRxObject@@UBEPAV1@XZ
?copyFrom@AcRxObject@@UAE?AW4ErrorStatus@Acad@@PBV1@@Z
?isEqualTo@AcRxObject@@UBEHPBV1@@Z
?comparedTo@AcRxObject@@UBE?AW4Ordering@AcRx@@PBV1@@Z
?dwgFileOpened@AcRxEventReactor@@UAEXPAVAcDbDatabase@@PAD@Z
?initialDwgFileOpenComplete@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?databaseConstructed@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?databaseToBeDestroyed@AcRxEventReactor@@UAEXPAVAcDbDatabase@@@Z
?deleteAcRxClass@@YAXPAVAcRxClass@@@Z
acedGetVar
acedMenuCmd
?acedPostCommand@@YAHPBD@Z
acedRegFunc
acedDefun
acedUndef
acedGetFunCode
acedSetVar
?acDocManagerPtr@@YAPAVAcApDocManager@@XZ
acedCommand
acedSyncFileOpen
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
_access
??0exception@@QAE@ABV0@@Z
strrchr
strncpy
_itoa
wcscpy
__CxxFrameHandler
_CxxThrowException
_purecall
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
__security_error_handler
??3@YAXPAX@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
SysFreeString
ord1077
ord1081
acrxEntryPoint
acrxGetApiVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ