AdobeHelpEncodeURIComponent
DisplayAdobeHelpClientPage
GetAdobeHelpClientOnlineStatus
GetAdobeHelpClientVersion
InitializeAdobeHelpClient
OpenURL
ReleaseURLMemory
SearchHelp
SearchHelpv2
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5925502e181f03bed131f5731020de90.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5925502e181f03bed131f5731020de90.dll
Resource
win10v2004-20231020-en
Target
NEAS.5925502e181f03bed131f5731020de90.exe
Size
620KB
MD5
5925502e181f03bed131f5731020de90
SHA1
cfccd0af6004a6651d0623af5946e92e3d81e70d
SHA256
cdb39ec31b2b9ce58fde0579d83a04bd3b4dd28656eb27ea53d47ad06477db50
SHA512
438f7f55990c54b59461a927fcb30e309840db9772cec2e34928458d4055e587c0350282ef371c630bd9a6ec9d5979ddfdcf2f418d8b96b786352d158c3f0dd3
SSDEEP
12288:MwKzQQ8TrVlqEXNh2R8iPw3wiz431vRbKSCFuZ+QWI1:T+o82iY3hz4lvRmuZ+Qt1
Checks for missing Authenticode signature.
resource |
---|
NEAS.5925502e181f03bed131f5731020de90.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
HttpSendRequestW
AssocQueryStringW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
GetProcessHeap
CreateSemaphoreA
CreateEventA
GetModuleHandleA
GetTickCount
CloseHandle
WaitForSingleObjectEx
ReleaseSemaphore
DuplicateHandle
GetProcAddress
GetCurrentProcess
SetEvent
FreeLibrary
RaiseException
GetLastError
GlobalFree
MultiByteToWideChar
GetModuleHandleW
GetStdHandle
GetEnvironmentVariableW
FindFirstFileW
GetFileAttributesExW
ReadFile
CreatePipe
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
GlobalAlloc
WideCharToMultiByte
LocalFree
SystemTimeToFileTime
ResetEvent
WaitForMultipleObjectsEx
VirtualQuery
FormatMessageA
LoadLibraryA
HeapAlloc
OpenEventA
SetWaitableTimer
InitializeSListHead
CreateEventW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
Sleep
GetCurrentProcessId
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CreateWaitableTimerA
QueryPerformanceCounter
wsprintfW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
SHGetFolderPathW
OleRun
CLSIDFromProgID
CoCreateInstance
CLSIDFromString
CoInitialize
GetErrorInfo
VariantChangeType
VariantCopy
SysAllocString
SysFreeString
VariantInit
VariantClear
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?id@?$ctype@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPBD@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?exceptions@ios_base@std@@QAEXH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?uncaught_exceptions@std@@YAHXZ
?_Syserror_map@std@@YAPBDH@Z
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
__std_exception_copy
memchr
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
_except_handler4_common
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
__std_terminate
__RTDynamicCast
__std_type_info_name
wcsstr
_purecall
memmove
_execute_onexit_table
_crt_atexit
_cexit
_register_onexit_function
_initterm_e
_initialize_onexit_table
_seh_filter_dll
strerror
_errno
_wassert
_configure_narrow_argv
terminate
_invalid_parameter_noinfo_noreturn
_initterm
_invalid_parameter_noinfo
_initialize_narrow_environment
_callnewh
malloc
free
wcscpy_s
toupper
isspace
wcscat_s
wcsncat_s
wcsncpy_s
wcslen
strlen
strcpy_s
strcat_s
tolower
strtoul
_itoa
atoi
_gmtime64
_localtime64
_time64
fflush
fclose
_get_stream_buffer_pointers
_wfopen_s
ungetc
__stdio_common_vsprintf
setvbuf
fgetc
fwrite
_fseeki64
fsetpos
__stdio_common_vsprintf_s
fputc
fgetpos
_lock_file
_unlock_file
_except1
AdobeHelpEncodeURIComponent
DisplayAdobeHelpClientPage
GetAdobeHelpClientOnlineStatus
GetAdobeHelpClientVersion
InitializeAdobeHelpClient
OpenURL
ReleaseURLMemory
SearchHelp
SearchHelpv2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ