SKSEPlugin_Load
SKSEPlugin_Query
SKSEPlugin_Version
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b9b24b2f9bd9587d3ea62a7e81da5940.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b9b24b2f9bd9587d3ea62a7e81da5940.dll
Resource
win10v2004-20231020-en
Target
NEAS.b9b24b2f9bd9587d3ea62a7e81da5940.exe
Size
636KB
MD5
b9b24b2f9bd9587d3ea62a7e81da5940
SHA1
2cbede99cfa17bd8f093413fbb0190869be10507
SHA256
56b5b94d616fc0628c3ae770dce2f627b514c28b626449dad792ffbf12fce158
SHA512
99fdc0069714a1c05bc70f127167490ecce4ca6929c6149ea3e64190847b7e656fd10af1ae3492b8167e1acb551f2e50ba0c5bc5c4b576720aa30ae0d4b321c1
SSDEEP
12288:chrcN3PcJIQbl9Cv/Z62Kja+g9No/ouRJi:2cN3Pun9C3Z62A4No/VJ
Checks for missing Authenticode signature.
resource |
---|
NEAS.b9b24b2f9bd9587d3ea62a7e81da5940.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetProcAddress
GetEnvironmentVariableW
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsGetValue
TlsSetValue
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
MultiByteToWideChar
GetProcessHeap
CloseHandle
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetLastError
Sleep
GetCurrentProcessId
GetDynamicTimeZoneInformation
GetStdHandle
WriteFile
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
WriteConsoleW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapSize
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
GetStringTypeW
SetEndOfFile
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
TlsAlloc
TlsFree
LoadLibraryExW
RtlUnwind
GetModuleHandleExW
SetStdHandle
GetFileType
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
MessageBoxW
SHGetFolderPathW
SKSEPlugin_Load
SKSEPlugin_Query
SKSEPlugin_Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ