DefProgCalData_Finish
DefProgCalData_Initialize
DefProgCalData_Initialize2
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.de60fd7ddf6b15ed6d8c0f1b151dd110.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.de60fd7ddf6b15ed6d8c0f1b151dd110.dll
Resource
win10v2004-20230915-en
Target
NEAS.de60fd7ddf6b15ed6d8c0f1b151dd110.exe
Size
374KB
MD5
de60fd7ddf6b15ed6d8c0f1b151dd110
SHA1
acb3a0617f6b5811df07d35ba1ae6c15b37c1f05
SHA256
96342ea355f8416067a6ca1c6048d96423d61e2c8da9e45a1d4701191b53da26
SHA512
cf45d5e49a9d24baefee072a7f67df342f7e2276346b9fc10f264717e78ecc4dce9b813da3e5ba9cce68b73408287fb88130468b23e29347c573f4f7379f12d0
SSDEEP
6144:3NUbqqJJ7WkAR2N1T3GJsRobcGh+6fK75XhwcgzmA/91Ke38hypR+d+bVOpKXKv7:+OUJ6m2JsRobc7dXhwcgzd1KnypvVOZj
Checks for missing Authenticode signature.
resource |
---|
NEAS.de60fd7ddf6b15ed6d8c0f1b151dd110.exe |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AdviseDDEDataReadyAnsi
CmtInstallThreadPoolCallback
_UP_strcoll
_UP_strcpy
_UP_strcspn
_UP_strftime
_UP_strftimeAnsi
_UP_strftimeUtf8
_UP_strlen
_UP_strncat
_UP_strncmp
_UP_strncpy
CmtNewLock
_UP_strpbrk
_UP_strrchr
_UP_strspn
_UP_strstr
_UP_strtod_FLTREG_
_UP_strtoimax
_UP_strtok
_UP_strtol
_UP_strtol64
_UP_strtoll
CmtNewLockAnsi
_UP_strtoul
_UP_strtoul64
_UP_strtoull
_UP_strtoumax
_UP_strxfrm
_UP_system
_UP_systemAnsi
_UP_systemUtf8
_UP_time
_UP_tmpfile
CmtNewLockUtf8
_UP_tmpnam
_UP_tmpnamAnsi
_UP_tmpnamUtf8
_UP_tolower
_UP_tolowerAnsi
_UP_tolowerUtf8
_UP_toupper
_UP_toupperAnsi
_UP_toupperUtf8
_UP_ungetc
CmtNewTSQ
_UP_wcslen
_UP_wcstombs
_UP_wcstombsAnsi
_UP_wcstombsUtf8
_UP_wctomb
_UP_wctombAnsi
_UP_wctombUtf8
_VaArgPassArgInfo
__AZShadowShowStats
__AZShadowStart
CmtNewTSV
__AZShadowStop
__AddItemToPseudoListBox
__AdjustPtrInfoDataForAllModules
__CVI_Debug_Break
__CVI_Debug_BreakIsEnabled
__CVI_Debug_Connect
__CVI_Debug_DiscardSharedMemory
__CVI_Debug_Disconnect
__CVI_Debug_DisconnectEx
__CVI_Debug_IsConnected
CmtNewThreadLocalVar
__CVI_Debug_Lock
__CVI_Debug_NewSharedMemory
__CVI_Debug_OpenSharedMemory
__CVI_Debug_RegisterThread
__CVI_Debug_SynchronizeMemory
__CVI_Debug_Unlock
__CVI_Debug_WaitForSignal
__CVI_Resource_Acquire
__CVI_Resource_AcquireAnsi
__CVI_Resource_AcquireUtf8
CmtNewThreadPool
__CVI_Resource_DumpToFile
__CVI_Resource_IsEnabled
__CVI_Resource_LockTable
__CVI_Resource_Release
__CVI_Resource_UnlockTable
__CanSkipDisablePatch3EK8PMIO
__CleanupUPAfterWatchpointException
__CreatePtrInfoForCommandLine
__CreatePtrInfoForWinMainCommandLine
__DBG_DllMainEnter
CmtPreAllocThreadPoolThreads
__DBG_DllMainLeave
__DBG_EnterFunctionInCurrentThreadEnv
__DBG_GetCurrentThreadEnv
__DBG_LeaveFunctionInCurrentThreadEnv
__DBG_RegisterRTEWithDebugger
__DBG_ReportStackCorruption
__DBG_ResetCurrentThreadEnv
__DBG_RestoreExecutionContext
__DBG_SafeCall
__DBG_SaveExecutionContext
CmtReadTSQData
__DBG_SetCurrentThreadEnvFileName
__DBG_SetCurrentThreadEnvLocation
__DBG_SetCurrentThreadEnvPosition
__DBG_UnregisterRTEWithDebugger
__DebugInfoAcquireLock
__DebugInfoReleaseLock
__FixupPtrdataForAllModules
__GetAppDirPathString
__GetCVIDebugSectionBaseAddress
__GetComConfig
AdviseDDEDataReadyUtf8
CmtReleaseLock
__GetDimmingPattern
__GetFreeMem
__GetHeapState
__GetKludgeState
__GetLocalThreadEnvSlot
__GetPortDefaults
__GetResDirPathString
__GetResDirPathStringAnsi
__GetResDirPathStringUtf8
__GetThreadEnvironmentForCurrentThread
CmtReleaseTSQReadPtr
__GetVaArgInfoPtr
__JPrintf
__NotifyLoadExternalModule
__PROFILER_BeginFunctionCall
__PROFILER_EndFunctionCall
__PROFILER_EnterFunction
__PROFILER_LeaveFunction
__RegisterAtExitCleanup
__RegisterContextInfo
__SetCurrentDebuggingLevel
CmtReleaseTSQWritePtr
__SetDebugModuleFileName
__SetDimmingPattern
__SetKludgeState
__SetUPErrorFile
__SetXModemFlushesQs
__SimulateRTShuttingDown
__SwitchExecutionContext
__UnregisterAtExitCleanup
__UnregisterContextInfo
__dbgasctime
CmtReleaseTSVPtr
__dbggmtime
_assert
_assert_func
_getmbcp
_ismbblead
_ismbbleadAnsi
_ismbbleadUtf8
_mbsbtype
_mbsbtypeAnsi
_mbsbtypeUtf8
CmtReleaseThreadPoolFunctionID
_mbscat
_mbscatAnsi
_mbscatUtf8
_mbschr
_mbschrAnsi
_mbschrUtf8
_mbscmp
_mbscmpAnsi
_mbscmpUtf8
_mbscpy
CmtScheduleThreadPoolFunction
_mbscpyAnsi
_mbscpyUtf8
_mbscspn
_mbscspnAnsi
_mbscspnUtf8
_mbsdec
_mbsdecAnsi
_mbsdecUtf8
_mbsicmp
_mbsicmpAnsi
CmtScheduleThreadPoolFunctionAdv
_mbsicmpUtf8
_mbsinc
_mbsincAnsi
_mbsincUtf8
_mbslen
_mbslenAnsi
_mbslenUtf8
_mbsnbcat
_mbsnbcatAnsi
_mbsnbcatUtf8
CmtSetCurrentThreadPriority
_mbsnbcmp
_mbsnbcmpAnsi
_mbsnbcmpUtf8
_mbsnbcpy
_mbsnbcpyAnsi
_mbsnbcpyUtf8
_mbsnbicmp
_mbsnbicmpAnsi
_mbsnbicmpUtf8
_mbspbrk
CmtSetTSQAttribute
_mbspbrkAnsi
_mbspbrkUtf8
_mbsrchr
_mbsrchrAnsi
_mbsrchrUtf8
_mbsspn
_mbsspnAnsi
_mbsspnUtf8
_mbsstr
_mbsstrAnsi
CmtSetTSV
_mbsstrUtf8
_mbstok
_mbstokAnsi
_mbstokUtf8
_putenv
_putenvAnsi
_putenvUtf8
abort
abs
acos_FLTREG_
AllocBitmapDataEx_WithAlloc
CmtSetThreadPoolAttribute
asctime
asin_FLTREG_
atan_FLTREG_
atan2_FLTREG_
atof_FLTREG_
atoi
atoi64
atol
atoll
bsearch
CmtTerminateThreadPoolThread
calloc
ceil_FLTREG_
clearerr
clock
close
cos_FLTREG_
cosh_FLTREG_
ctime
difftime_FLTREG_
div_8STRCTEAXEDX_
CmtTryToGetLock
eof
exp_FLTREG_
fabs_FLTREG_
fclose
fdopen
feof
ferror
fflush
fgetc
fgetpos
CmtUninstallTSQCallback
fgets
floor_FLTREG_
fmod_FLTREG_
fopen
fopenAnsi
fopenUtf8
fprintf
fputc
fputs
fread
CmtUninstallThreadPoolCallback
free
freopen
freopenAnsi
freopenUtf8
frexp_FLTREG_
fscanf
fseek
fsetpos
ftell
fwrite
CmtWaitForThreadPoolFunctionCompletion
getc
getchar
getenv
getenvAnsi
getenvUtf8
gets
gmtime
isalnum
isalpha
iscntrl
CmtWaitForThreadPoolFunctionCompletionEx
isdigit
isgraph
islower
islowerAnsi
islowerUtf8
isprint
ispunct
isspace
isupper
isupperAnsi
CmtWriteTSQData
isupperUtf8
isxdigit
labs
ldexp_FLTREG_
ldiv_8STRCTEAXEDX_
llabs
lldiv
localeconv
localeconvAnsi
localeconvUtf8
ColorRGBSelectPopup
localtime
log_FLTREG_
log10_FLTREG_
longjmp
lseek
malloc
mblen
mblenAnsi
mblenUtf8
mbstowcs
ComBreak
mbstowcsAnsi
mbstowcsUtf8
mbtowc
mbtowcAnsi
mbtowcUtf8
memchr
memcmp
memcpy
memmove
memset
AllocBitmapData_WithAlloc
ComFromFile
mktime
modf_FLTREG_
open
openAnsi
openUtf8
perror
pow_FLTREG_
printf
putc
putchar
ComRd
puts
qsort
raise
rand
read
realloc
remove
removeAnsi
removeUtf8
rename
ComRdByte
renameAnsi
renameUtf8
rewind
scanf
setbuf
setjmp
setlocale
setvbuf
signal
sin_FLTREG_
ComRdTerm
sinh_FLTREG_
snprintf
sopen
sopenAnsi
sopenUtf8
sprintf
sqrt_FLTREG_
srand
sscanf
strcat
ComSetEscape
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strftimeAnsi
strftimeUtf8
stricmp
ComToFile
strlen
strncat
strncmp
strncpy
strnicmp
strpbrk
strrchr
strspn
strstr
strtod_FLTREG_
ComWrt
strtoimax
strtok
strtol
strtol64
strtoll
strtoul
strtoul64
strtoull
strtoumax
strxfrm
ComWrtByte
system
systemAnsi
systemUtf8
tan_FLTREG_
tanh_FLTREG_
time
tmpfile
tmpnam
tmpnamAnsi
tmpnamUtf8
CommitChangesToRTSystem
tolower
tolowerAnsi
tolowerUtf8
toupper
toupperAnsi
toupperUtf8
ungetc
vDebugPrintf
vfprintf
vfscanf
CompareBytes
vprintf
vscanf
vsnprintf
vsprintf
vsscanf
wcslen
wcstombs
wcstombsAnsi
wcstombsUtf8
wctomb
AllocCVIMemory
CompareCVIAbsoluteTimes
wctombAnsi
wctombUtf8
write
CompareCVIAbsoluteTimesWithTolerance
CompareCVITimeIntervals
CompareCVITimeIntervalsWithTolerance
CompareStrings
CompareStringsAnsi
CompareStringsUtf8
ConfigurePrinter
ConfigureProcessorPool
ConfirmPopup
AllocImageBits_WithAlloc
ConfirmPopupAnsi
ConfirmPopupUtf8
ConnectToDDEServer
ConnectToDDEServerAnsi
ConnectToDDEServerUtf8
ConnectToTCPServer
ConnectToTCPServerAnsi
ConnectToTCPServerEx
ConnectToTCPServerExAnsi
ConnectToTCPServerExUtf8
ApplyRTSystemImage
ConnectToTCPServerUtf8
ConvertUICoordinates
CopyBytes
CopyFileAnsi
CopyFileUtf8
CopyString
CopyTabPage
CopyTreeItem
CreateMetaFont
CreateMetaFontAnsi
ApplyRTSystemImageAnsi
CreateMetaFontEx
CreateMetaFontExAnsi
CreateMetaFontExUtf8
CreateMetaFontUtf8
CreateMetaFontWithCharacterSet
CreateMetaFontWithCharacterSetAnsi
CreateMetaFontWithCharacterSetUtf8
CreateRTSystemImage
CreateRTSystemImageAnsi
CreateRTSystemImageUtf8
ApplyRTSystemImageUtf8
CreateUDPChannel
CreateUDPChannelConfig
CurrThreadId
DOSColorToRGB
DOSCompatWindow
DSBindCtrl
DSBindCtrlAnsi
DSBindCtrlUtf8
KDProc_ErrorProcessing
KD_DATETIME_Reset
KD_fread_StringOnlyWithLength
KD_fwrite_StringOnlyWithLength
fread_KD_DATETIME
fwrite_KD_DATETIME
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
CloseHandle
CreateMutexA
ExitProcess
GetCurrentProcessId
GetLastError
GetModuleFileNameA
LoadLibraryA
OpenMutexA
ReleaseMutex
WaitForSingleObject
wsprintfA
DefProgCalData_Finish
DefProgCalData_Initialize
DefProgCalData_Initialize2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ