Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.52910604ca72e606bf26d618a2279800.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.52910604ca72e606bf26d618a2279800.dll
Resource
win10v2004-20230915-en
Target
NEAS.52910604ca72e606bf26d618a2279800.exe
Size
469KB
MD5
52910604ca72e606bf26d618a2279800
SHA1
24f3e8401bacfa2c0c2c32c75ad8046ab64a33c8
SHA256
80abd687c6ca72d1cc28ef7da813ef632882c934b771ac128a64e4e5e41ed3dd
SHA512
09b13a97f66df8d8160e20ea5116a6908a2dfac7ee3af5d4fd487cce4b53732ce572148b0a471f7c9a3ef5053ec89c44a9b2b017e59624dc308a39f36c4709e5
SSDEEP
12288:2rSSsmSQy5GUdoKeeYXvJzk61UiAw4D3krDID6IiwMd4U:25smSQy5GUdoKeeYXvJzkWUiAw4D3W0y
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord5575
ord5567
ord6057
ord5860
ord3591
ord535
ord925
ord4124
ord3614
ord3737
ord818
ord3566
ord5781
ord1634
ord2371
ord2444
ord2859
ord6871
ord816
ord562
ord2144
ord1230
ord1143
ord1165
ord6190
ord5568
ord2910
ord6466
ord5795
ord1173
ord2862
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5732
ord5285
ord5710
ord4616
ord3733
ord561
ord815
ord3948
ord2717
ord922
ord537
ord940
ord5706
ord6193
ord6107
ord6238
ord956
ord2810
ord2105
ord2855
ord3711
ord790
ord556
ord809
ord1088
ord2114
ord5977
ord3541
ord6354
ord4118
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord5674
ord5790
ord5785
ord5869
ord6168
ord6017
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord2634
ord858
ord2362
ord861
ord6211
ord538
ord2078
ord4294
ord2294
ord795
ord3716
ord3397
ord4470
ord4704
ord6330
ord3087
ord4229
ord2356
ord2287
ord2350
ord2293
ord641
ord324
ord3592
ord4419
ord5276
ord4401
ord1767
ord6048
ord2506
ord4992
ord4847
ord825
ord4370
ord5261
ord3658
ord470
ord755
ord2854
ord2746
ord283
ord2406
ord5871
ord540
ord3798
ord323
ord1633
ord2397
ord640
ord800
ord3621
ord6451
ord5047
ord4270
ord692
ord567
ord3634
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4395
ord1768
ord4073
ord6051
ord2016
ord2405
ord6362
ord1764
ord823
ord5303
realloc
malloc
fflush
vfprintf
fopen
strncpy
_wcsicmp
free
fclose
atoi
wcscmp
wcslen
iswdigit
_wtoi
_wcsdup
_getdrives
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_purecall
_ftol
srand
rand
_except_handler3
__CxxFrameHandler
_snprintf
lstrcatA
GetLocalTime
CreateToolhelp32Snapshot
Module32FirstW
GetLongPathNameA
Module32NextW
GetCurrentThread
SetUnhandledExceptionFilter
OutputDebugStringW
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
FlushInstructionCache
InterlockedIncrement
GetCurrentProcessId
CloseHandle
CreateEventW
GetCurrentThreadId
LoadLibraryExW
FreeLibrary
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetLongPathNameW
GetTickCount
GetModuleFileNameW
LoadLibraryW
GetModuleHandleW
OutputDebugStringA
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetLastError
SetLastError
lstrlenW
InterlockedDecrement
lstrcpyA
VirtualQuery
GetModuleFileNameA
FindFirstFileA
WideCharToMultiByte
GetPrivateProfileStringW
lstrcpynW
DebugBreak
lstrlenA
GetPrivateProfileIntW
WritePrivateProfileStringW
LocalFree
LocalAlloc
FindClose
lstrcmpW
IsWindow
SetRectEmpty
GrayStringW
TabbedTextOutW
GetDC
ReleaseDC
BeginDeferWindowPos
ShowWindow
ScreenToClient
DeferWindowPos
EndDeferWindowPos
EnableWindow
DrawTextW
GetSysColor
LoadBitmapW
InflateRect
FillRect
RedrawWindow
CreateWindowExW
DestroyWindow
GetWindowLongW
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
SetTimer
SetRect
OffsetRect
KillTimer
SetWindowTextW
GetWindowTextW
MoveWindow
LoadCursorW
RegisterWindowMessageW
IsWindowVisible
BringWindowToTop
wsprintfW
IsRectEmpty
EqualRect
wvsprintfW
LoadImageW
GetFocus
UnhookWindowsHookEx
GetParent
SetDlgItemTextW
GetDlgItem
SendMessageW
SetWindowsHookExW
GetKeyState
CallNextHookEx
IsWindowEnabled
DrawEdge
DrawFocusRect
GetMenu
AdjustWindowRectEx
BeginPaint
EndPaint
CreateDialogParamW
SetCapture
ReleaseCapture
GetCapture
GetDlgCtrlID
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
GetDoubleClickTime
DefWindowProcW
GetSubMenu
LoadMenuW
LoadStringW
GetAncestor
MonitorFromWindow
GetMonitorInfoW
SetParent
SetWindowLongW
EndDialog
DialogBoxParamW
GetSystemMetrics
SetFocus
GetClassNameW
WindowFromPoint
SetActiveWindow
InvalidateRect
SetCursor
PtInRect
UpdateWindow
CharNextW
PostMessageW
GetCursorPos
IsChild
ClientToScreen
TrackPopupMenu
DestroyMenu
CopyRect
CallWindowProcW
SetBkMode
FloodFill
GetWindowExtEx
GetViewportExtEx
LPtoDP
GetBkColor
GetStockObject
CreateFontW
CreateFontIndirectW
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
SetBkColor
GetObjectW
GetTextExtentPoint32W
CreateSolidBrush
CreateDIBSection
SelectObject
StretchBlt
DeleteDC
CreateCompatibleDC
BitBlt
DeleteObject
SetTextColor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
InitializeSecurityDescriptor
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
CoTaskMemFree
CreateBindCtx
DispCallFunc
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
RegisterBindStatusCallback
CreateURLMoniker
ord16
ord53
ord58
ord42
ord11
ord10
ord21
ord57
ord18
ord30
ord32
ord44
ord45
ord15
ord31
ord43
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetCurrentVersionW
PathFindFileNameA
PathAppendA
PathRemoveFileSpecA
PathAppendW
PathRemoveFileSpecW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ