DllRegisterServer
DllUnregisterServer
PlugInMain
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1286d6819f45f9a786ddc8f4ca0f00d0.dll
Resource
win7-20231020-en
Target
NEAS.1286d6819f45f9a786ddc8f4ca0f00d0.exe
Size
731KB
MD5
1286d6819f45f9a786ddc8f4ca0f00d0
SHA1
38a5657fea035a8ab34eb9962174858e6f607fb1
SHA256
39d602fc65216c23f2236ce3f834fa6556451732568b6d766f9784477ecef902
SHA512
8382fa9cb7147d21646cc763e6292f0b9fc26e6b606ded45522610fe2bf9279002d05fc9056c11c8dfd46dd8859cfd31d4cf186354f30aca2ef108f9b1171c3d
SSDEEP
12288:zBKKa2YbfjUmywdVtnpulkYotMMLP1hJPyrPBiuJW3lmi:1kbLUOTnEuYotFvJ6Ww
Checks for missing Authenticode signature.
resource |
---|
NEAS.1286d6819f45f9a786ddc8f4ca0f00d0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
IsDBCSLeadByte
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryA
GetSystemDirectoryA
SetThreadLocale
GetThreadLocale
GetVersionExA
LockResource
FreeResource
OutputDebugStringA
lstrcpyA
GetTickCount
ProcessIdToSessionId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetModuleFileNameW
SetLastError
LoadLibraryW
lstrcmpiA
lstrlenA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
wsprintfA
GetWindowTextA
SetFocus
MoveWindow
GetPropW
IsWindow
SetPropW
SystemParametersInfoA
CharNextA
FindWindowA
OffsetRect
IsRectEmpty
GetWindowRect
CharNextW
GetFocus
NotifyWinEvent
GetWindowThreadProcessId
GetGUIThreadInfo
GetClassNameA
RegEnumKeyExA
RegQueryInfoKeyW
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
StringFromGUID2
CoDisconnectObject
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
SysFreeString
VariantClear
SysStringLen
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
SysAllocString
SysStringByteLen
VariantInit
UnRegisterTypeLi
RegisterTypeLi
?max@?$numeric_limits@F@std@@SAFXZ
?max@?$numeric_limits@I@std@@SAIXZ
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??Bios_base@std@@QBEPAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_BADOFF@std@@3_JB
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?max@?$numeric_limits@J@std@@SAJXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
fgetpos
_wtoi
strcat_s
wcsncpy_s
strcpy_s
_mbsnbcat_s
wcscmp
vsprintf_s
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
_vsnprintf_s
strncmp
isdigit
_time64
_localtime64
_gmtime64
atoi
isalpha
strchr
??3@YAXPAX@Z
memcmp
strlen
memcpy
memmove
memset
strstr
__CxxFrameHandler3
_CxxThrowException
strpbrk
strrchr
__RTDynamicCast
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
fgetc
fputc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
memcpy_s
fwrite
_recalloc
_fseeki64
fsetpos
fclose
_purecall
tolower
strcmp
_set_invalid_parameter_handler
_mbsnbcpy_s
_mbsstr
malloc
free
??_V@YAXPAX@Z
_resetstkoflw
DllRegisterServer
DllUnregisterServer
PlugInMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ