?ASstrcpy_safe@@YAPADPADPBD@Z
PlugInMain
SendExec
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a3c8b0b8597d4b01fb662e953751da10.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a3c8b0b8597d4b01fb662e953751da10.dll
Resource
win10v2004-20231020-en
Target
NEAS.a3c8b0b8597d4b01fb662e953751da10.exe
Size
2.3MB
MD5
a3c8b0b8597d4b01fb662e953751da10
SHA1
6c09ec14751cb8a9feae6b98a3888f494a5417c7
SHA256
a825daf65416d8ebdb094c568a45fa6be4e8f27ccb81c3e2388b4e944712e7ee
SHA512
0ee6d47c05980f0725c08fab83a65d2a5458a080857851ee285d44b0da25470e9d838df84b19ba3bb03933a8593b422c2e5d2a26f976d288a8aba6dfc11b9f26
SSDEEP
49152:VvlrqQqebREhra5AYNP7uPFP5gRg+p4Rywio:VvlrqjeFma5AYNq/gRu
Checks for missing Authenticode signature.
resource |
---|
NEAS.a3c8b0b8597d4b01fb662e953751da10.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
DisconnectNamedPipe
SetNamedPipeHandleState
GetOverlappedResult
SetEvent
ResetEvent
CreateEventA
WaitForMultipleObjects
LocalFree
WaitNamedPipeA
SetCurrentDirectoryA
GetCurrentDirectoryA
DisableThreadLibraryCalls
GetFileSize
SetFilePointer
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
Sleep
ExpandEnvironmentStringsA
GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
lstrcpyA
FindAtomW
VirtualQuery
SystemTimeToFileTime
FindClose
FindFirstFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalAlloc
CreateSemaphoreA
GetCurrentProcess
GetCurrentThread
CreateProcessW
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
OutputDebugStringW
CloseHandle
WriteFile
ReadFile
FlushFileBuffers
CreateFileA
GetCurrentProcessId
GetTickCount
GetSystemTime
DeleteCriticalSection
InitializeCriticalSectionEx
RaiseException
lstrlenA
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryA
SetLastError
GetLastError
OutputDebugStringA
GetSystemInfo
VirtualProtect
LoadLibraryExA
SwitchToFiber
DeleteFiber
ReadConsoleW
CreateFiber
GetModuleHandleExW
FindNextFileW
GetStdHandle
GetEnvironmentVariableW
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
IsWindowEnabled
EnableWindow
PeekMessageA
DispatchMessageA
TranslateMessage
SetPropW
GetProcessWindowStation
GetUserObjectInformationW
GetMessageA
MessageBoxW
GetParent
FindWindowA
GetPropW
GetFocus
SetFocus
MoveWindow
GetWindowRect
wsprintfA
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ConvertSidToStringSidA
GetTokenInformation
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
CoCreateInstance
SysAllocString
SysFreeString
SafeArrayAccessData
SafeArrayDestroy
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
wcsstr
_purecall
memset
__std_type_info_destroy_list
_except_handler4_common
strstr
__std_exception_destroy
__std_exception_copy
strchr
strrchr
memchr
_CxxThrowException
memcmp
memmove
memcpy
__std_terminate
__CxxFrameHandler3
strcspn
_strnicmp
strtok_s
strpbrk
tolower
strlen
strncpy
strcmp
wcslen
isalpha
wcscat_s
strncmp
_stricmp
isspace
isdigit
strspn
wcsncpy_s
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf_s
fputs
__stdio_common_vsnprintf_s
__stdio_common_vswscanf
fopen
fclose
_wfopen
__stdio_common_vsscanf
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vswprintf
_setmode
fwrite
ftell
fseek
fread
_fileno
fgets
fflush
feof
ferror
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm_e
_set_invalid_parameter_handler
signal
_configure_narrow_argv
_invalid_parameter_noinfo
_errno
raise
_initialize_narrow_environment
strerror_s
_cexit
_initterm
_crt_atexit
_invalid_parameter_noinfo_noreturn
_exit
atoi
strtol
strtoul
_itoa_s
_wtoi
wcstombs_s
floor
_except1
_callnewh
free
malloc
realloc
getenv
_mbsstr
_mbstowcs_s_l
_free_locale
_create_locale
_stat64i32
_gmtime64
_gmtime64_s
_localtime64
_time64
qsort
?ASstrcpy_safe@@YAPADPADPBD@Z
PlugInMain
SendExec
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ