CPlApplet
DllMain
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.53b5d7d2b10bffdc88e4fcdb5c7b9eb0.dll
Resource
win7-20230831-en
Target
NEAS.53b5d7d2b10bffdc88e4fcdb5c7b9eb0.exe
Size
393KB
MD5
53b5d7d2b10bffdc88e4fcdb5c7b9eb0
SHA1
ed227150d418458b4859df95a305c69279fb501b
SHA256
7174da200f55d90ce021ebd691d851d8d57cd1c58e7f8f33680b08d101384491
SHA512
6687c86affeeeeb6b2e16bc9c43116205a2a20bfa5a4855872197113f0f025ad9930e57489d95d566e88548b201641cb020f024bb7fb6a4b791070710067f913
SSDEEP
12288:gqJAgc/UriFHva8is5x8MuwdlFCuQgpd5S69kj:gqJARMmF/ikhfDq
Checks for missing Authenticode signature.
resource |
---|
NEAS.53b5d7d2b10bffdc88e4fcdb5c7b9eb0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
CloseDesktop
OpenInputDesktop
LoadStringA
wsprintfA
GetShellWindow
GetWindowThreadProcessId
HeapAlloc
LoadLibraryW
CompareStringW
FlushFileBuffers
WriteConsoleW
GetProcAddress
GetModuleHandleA
InterlockedIncrement
GlobalMemoryStatusEx
GetVersionExA
VerifyVersionInfoA
VerSetConditionMask
GetCurrentProcess
GetNativeSystemInfo
CloseHandle
GlobalFree
LocalFree
GlobalAlloc
GetLastError
CreateFileA
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
CreateProcessA
WaitForSingleObject
lstrlenA
GetEnvironmentVariableA
GetWindowsDirectoryA
LocalAlloc
FormatMessageA
WTSGetActiveConsoleSessionId
GetLongPathNameA
GetShortPathNameA
GetModuleFileNameA
InterlockedDecrement
GetTempPathA
GetLocalTime
OpenProcess
lstrcatA
SetEvent
OpenEventA
OutputDebugStringA
GetCurrentProcessId
GetCurrentThreadId
InterlockedExchange
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
RtlUnwind
GetDriveTypeW
FindFirstFileExW
HeapFree
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
DecodePointer
GetCommandLineA
GetConsoleMode
EncodePointer
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LCMapStringW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCurrentDirectoryW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameW
CreateFileW
InitializeCriticalSectionAndSpinCount
HeapCreate
HeapDestroy
ExitProcess
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoW
SetEnvironmentVariableW
SetEnvironmentVariableA
Sleep
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteFile
GetModuleFileNameW
HeapSize
GetStringTypeW
SetStdHandle
GetConsoleCP
HeapReAlloc
StringFromCLSID
CoTaskMemFree
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString
VariantClear
CPlApplet
DllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ