CnvInitialize
CnvTerminate
FCnvExport
FCnvImport
FCnvSelect
FCnvSilentImport
RMGetRegPath
RMGetSession
RMGetSite
RMGetuser
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7b413819ac3972f3c21c837ad379f180.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7b413819ac3972f3c21c837ad379f180.dll
Resource
win10v2004-20231020-en
Target
NEAS.7b413819ac3972f3c21c837ad379f180.exe
Size
283KB
MD5
7b413819ac3972f3c21c837ad379f180
SHA1
053f304ba66348283d8da450e322527eb5604a1e
SHA256
3694c7bda342499222924fef0e63bc0de63f904ea7627cbb96e58335d460e3c8
SHA512
d54a38a020fcb821385426b03af5f31cbfe2ed86cf90d4e9545a55585489310ae5d24f962a61d94fafa1e2e5c84ef1c4f08ab0d3388ccc8a213cfb2f4d74f687
SSDEEP
6144:eO7QSu6ar8qpUeIOyMTuzYZmGfpq1uGbwxcEjO+SWX4swR:VMBJnpUeIhLYgQpqExRLos4
Checks for missing Authenticode signature.
resource |
---|
NEAS.7b413819ac3972f3c21c837ad379f180.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_vsnwprintf
??3@YAXPAX@Z
_wtoi
_splitpath_s
??2@YAPAXI@Z
_makepath_s
memset
strncpy_s
memcpy
_endthreadex
_beginthreadex
atoi
_wmakepath_s
_wsplitpath_s
_encode_pointer
_malloc_crt
_encoded_null
free
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
wcstok_s
ord17
MessageBoxW
KillTimer
SetTimer
SetWindowLongW
SetWindowLongA
EndDialog
CharNextA
ShowWindow
GetDlgItem
GetParent
PostMessageA
SendMessageA
SendDlgItemMessageA
LoadStringA
GetClientRect
SendDlgItemMessageW
EnableWindow
SendMessageW
GetSysColor
LoadIconA
CheckRadioButton
SetCursor
LoadCursorA
SetDlgItemTextW
SetWindowTextW
GetWindowTextW
LoadStringW
SetForegroundWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
ReleaseDC
GetDC
SetWindowPos
CallWindowProcW
SetCapture
ReleaseCapture
SetClassLongA
MessageBeep
DispatchMessageA
TranslateMessage
PeekMessageA
DialogBoxParamW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetDeviceCaps
CreateFontIndirectA
DeleteObject
GetObjectA
CoTaskMemFree
GetUserDefaultLangID
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
DeleteFileA
CloseHandle
GetLastError
SetLastError
GetLocalTime
GetModuleFileNameW
OutputDebugStringA
FormatMessageW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetTempPathW
GetWindowsDirectoryW
GlobalSize
lstrlenA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
lstrlenW
MulDiv
CompareStringA
GetExitCodeThread
Sleep
lstrcmpW
GetVersionExA
lstrcmpA
GetFileAttributesA
GetLocaleInfoW
MultiByteToWideChar
lstrcmpiA
ord929
ord639
ord7714
ord1729
ord6877
ord414
ord295
ord1350
ord2004
ord7629
ord1383
ord6873
ord1988
ord1391
ord6822
ord294
ord2563
ord2335
ord6141
ord7927
ord1378
ord6243
ord304
ord797
ord1835
ord834
ord1458
ord610
ord6818
ord6281
ord528
ord6888
CnvInitialize
CnvTerminate
FCnvExport
FCnvImport
FCnvSelect
FCnvSilentImport
RMGetRegPath
RMGetSession
RMGetSite
RMGetuser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ