DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5ae4787f0ff4274c1d3a0c3d85c28380.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5ae4787f0ff4274c1d3a0c3d85c28380.dll
Resource
win10v2004-20231020-en
Target
NEAS.5ae4787f0ff4274c1d3a0c3d85c28380.exe
Size
449KB
MD5
5ae4787f0ff4274c1d3a0c3d85c28380
SHA1
3c0f77547eebaafdf29bd3979c0539e242a196ee
SHA256
a9b3898c10078c6672f50f310bccba905551a1df3bd51a80ea6b5290cb6c37c0
SHA512
0cc5774e94a39d6b6f27fb09755856e8f741f6a31c3a66b6892309cb2f27b4785d3f08e539ee25bbcb1e5df8a785a0b64b9221959c430f44bafa93a8af2d0605
SSDEEP
6144:WYpURaGKRgTwBPumRCXYMj7Mc5Hlguj3cjM+nzcbwmafm4+tnIOBlmXffGTz8f:lpU0Gpw8Nr1j3MMMuF/JIOB/z
Checks for missing Authenticode signature.
resource |
---|
NEAS.5ae4787f0ff4274c1d3a0c3d85c28380.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
GetProcessHeap
LoadLibraryExW
HeapFree
GetShortPathNameA
CompareStringW
IsWow64Process
lstrcmpiA
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer
LoadResource
IsDBCSLeadByte
RaiseException
GetLastError
GetLocaleInfoW
MultiByteToWideChar
GetModuleHandleA
FindResourceA
InitializeCriticalSectionEx
LeaveCriticalSection
EncodePointer
LoadLibraryExA
EnterCriticalSection
SizeofResource
GetModuleFileNameA
VirtualQuery
VirtualProtect
GetSystemInfo
LocaleNameToLCID
OutputDebugStringW
IsDebuggerPresent
FileTimeToSystemTime
GetStringTypeExW
IsValidCodePage
SetLastError
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TlsSetValue
FlsGetValue
FlsSetValue
TlsAlloc
TlsGetValue
TlsFree
FlsFree
GetLongPathNameW
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoCreateInstance
SysStringLen
VarBstrCmp
UnRegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysFreeString
RegisterTypeLi
SysAllocString
VarUI4FromStr
ReportEventW
DeregisterEventSource
RegEnumValueW
RegCreateKeyExW
RegGetValueW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExA
RegisterEventSourceW
memcmp
memcpy
wcsstr
_except_handler4_common
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
_purecall
__std_terminate
strstr
wcsrchr
wcschr
__std_exception_copy
memmove
memset
__std_type_info_destroy_list
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
??Bid@locale@std@@QAEIXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_Thrd_id
_Xtime_get_ticks
_Thrd_sleep
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?_XGetLastError@std@@YAXXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
_invalid_parameter_noinfo
_errno
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_resetstkoflw
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
terminate
malloc
_recalloc
realloc
free
isdigit
wcscpy_s
wcscmp
wcsncat_s
iswspace
strncpy_s
wcsncpy_s
strcpy_s
strcat_s
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
__initialize_lconv_for_unsigned_char
_except1
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ