DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c2d30eba93e3d28ef869c220bd79ece0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c2d30eba93e3d28ef869c220bd79ece0.dll
Resource
win10v2004-20230915-en
Target
NEAS.c2d30eba93e3d28ef869c220bd79ece0.exe
Size
1.2MB
MD5
c2d30eba93e3d28ef869c220bd79ece0
SHA1
30d2cba78f95b592a0c95492bbe1d0ba4441b985
SHA256
de0965ab6f11dd9175c49218456734231d53207117bac9063bd40ab0aff0ec85
SHA512
3b2808fd4ca48872659ba24be2d8f62dcf7a3f72dda6fabba7ac8351f577b65999e56893b759faf9640e120d52985d4bde5426e488e0b19f414f86a7ebdac4f9
SSDEEP
24576:sI44KRBWKq0DdQtsAiXVPDZnzDI8pzC7dZ+/k1ysqZAl/tti9YoO5Qhv:sI44KRBWKjdxTpQEs1NqZctti9Y4
Checks for missing Authenticode signature.
resource |
---|
NEAS.c2d30eba93e3d28ef869c220bd79ece0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
OutputDebugStringW
lstrcpyA
LCMapStringW
LCMapStringA
MultiByteToWideChar
lstrlenA
GetStringTypeA
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeW
wsprintfA
LoadBitmapA
SetMenuInfo
CreatePatternBrush
DeleteObject
StringFromIID
CoGetMalloc
SHDeleteKeyA
SHDeleteValueA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ