DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.81332c6c26307e16b55abf4c451206e0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.81332c6c26307e16b55abf4c451206e0.dll
Resource
win10v2004-20231020-en
Target
NEAS.81332c6c26307e16b55abf4c451206e0.exe
Size
522KB
MD5
81332c6c26307e16b55abf4c451206e0
SHA1
4386a3ccf92624e435fc7d4dcbe98ad0f7b3dc80
SHA256
2613b3b69da92b6d4872f256cfeb44830c073024b4fc16e2ab644b204a22efd3
SHA512
2b38527a583d2b8a6c74f7c8c758ae08ae25213110daac9fbfa9fa1e4691255c346ad6571b848ae7527c28f84d5773636df1cc18ba24b1418fc41a123a926198
SSDEEP
12288:syg7L9K+qNK2O9QDGAYYd+aOvbTIS2o3234xi/Nk2:syKLjn9HAx7OYo5i5
Checks for missing Authenticode signature.
resource |
---|
NEAS.81332c6c26307e16b55abf4c451206e0.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_TrackMouseEvent
ord814
ord2536
ord3096
ord941
ord837
ord754
ord946
ord944
ord2462
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
lstrlenW
MultiByteToWideChar
lstrlenA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
HeapFree
GetVersionExA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
CompareStringW
LockResource
LoadResource
FindResourceW
GetLocaleInfoW
InterlockedDecrement
InterlockedIncrement
SetLastError
FlushInstructionCache
GetLastError
EnterCriticalSection
LeaveCriticalSection
RaiseException
LoadLibraryW
GetProcAddress
InitializeCriticalSectionAndSpinCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetFocus
InflateRect
RegisterClassExW
GetClassInfoExW
SetRect
CopyRect
IsWindowVisible
IsWindow
MoveWindow
SetScrollPos
SetScrollInfo
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
EndPaint
BeginPaint
PtInRect
UnionRect
GetClientRect
SetFocus
IsChild
GetParent
InvalidateRect
KillTimer
SetWindowLongW
GetWindowLongW
DefWindowProcW
GetSysColor
SetCapture
ScreenToClient
ReleaseCapture
GetSystemMetrics
ClientToScreen
SetCursor
GetKeyState
OffsetRect
InvalidateRgn
EqualRect
SetWindowRgn
IntersectRect
SetWindowPos
DialogBoxParamW
DrawTextW
SetRectEmpty
SetTimer
FillRect
ReleaseDC
GetDC
DrawFocusRect
DrawEdge
UpdateWindow
RegisterWindowMessageW
GetDlgItem
SetWindowTextW
EnableWindow
PostMessageW
MessageBeep
EndDialog
GetWindowTextLengthW
GetWindowTextW
SendMessageW
SetWindowContextHelpId
GetWindow
MapDialogRect
IsDialogMessageW
GetWindowRect
GetWindowPlacement
SetWindowPlacement
SendDlgItemMessageW
GetClassNameW
MapWindowPoints
SystemParametersInfoW
UnregisterClassA
LoadCursorW
Polygon
GetTextExtentPoint32W
PtInRegion
CombineRgn
GetTextMetricsW
CreateDIBPatternBrushPt
MoveToEx
LineTo
RoundRect
GetViewportOrgEx
IntersectClipRect
CreateRectRgnIndirect
OffsetRgn
GetObjectW
GetStockObject
ExtTextOutW
SetBkColor
BitBlt
CreateCompatibleBitmap
SetBkMode
CreateCompatibleDC
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
RestoreDC
CreateMetaFileW
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
DeleteObject
CreateSolidBrush
Rectangle
SelectObject
SetTextColor
CreatePen
DeleteDC
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
OleCreatePropertyFrame
SysStringByteLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString
??0GCCalendar@@QAE@GGGPBVGCTimeZone@@PBVGCLocale@@@Z
?LaunchURL@GCHelpLauncher@@SGXPB_WPAUHWND__@@@Z
?AddMilliseconds@GCDate@@QBE?AV1@N@Z
??HGCDate@@QBE?AV0@N@Z
?DateFromRelativeHourAndDate@GCCalendarDateUtils@@SG?AVGCDate@@NABV2@@Z
?AddMinutes@GCDate@@QBE?AV1@N@Z
?GetNumberOfHoursInDay@GCCalendar@@QBEGXZ
?RelativeHourFromDate@GCCalendarDateUtils@@SGNABVGCDate@@0@Z
?GetMinute@GCCalendar@@QBEGXZ
?Init@GCDateFormat@@AAEX_NW4STYLE@1@00KABVGCLocale@@PB_W33@Z
?Format@GCDateFormat@@QBEXABVGCDate@@AAVGCStackStrBase@@@Z
?GetHourOfDay@GCCalendar@@QBEGXZ
?AddHours@GCDate@@QBE?AV1@N@Z
?FormatTimeCompact@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?Set@GCCalendar@@QAEXGGGGG@Z
?MILLIS_PER_HOUR@GCDate@@2JB
?MILLIS_PER_MINUTE@GCDate@@2JB
?RelativeHourFromDate@GCCalendarDateUtils@@SGNABVGCDate@@@Z
?SetDefaultTimeZone@GCCalendarDateUtils@@SGXABVGCTimeZone@@@Z
?GetDefaultTimeZone@GCCalendarDateUtils@@SGABVGCTimeZone@@XZ
?Hash@@YGKPBEKK@Z
?Compare@GCStr@@QBEJPB_W@Z
?int_Empty@GCAtom@@AAEXXZ
??4GCAtom@@QAEABV0@AAVGCStrRetVal@@@Z
??1GCFireCtx@@QAE@XZ
?PostUIThreadMessage@@YGXPAX0@Z
?QueryInterfaceNoReleaseNoThrow@GCIPtrBase@@IAEJABU_GUID@@PAUIUnknown@@@Z
?QueryInterfaceNoRelease@GCIPtrBase@@IAEXABU_GUID@@PAUIUnknown@@@Z
?CreateInstanceNoRelease@GCIPtrBase@@IAEXABU_GUID@@0K@Z
?EqualsNoCase@GCStr@@QBE_NPB_W@Z
?EndOfDay@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@@Z
?FormatMonthAndYear@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@JJ@Z
??1GCAtom@@QAE@XZ
??0GCAtom@@QAE@AAVGCStrRetVal@@@Z
?SetMinute@GCCalendar@@QAEXG@Z
?SetHourOfDay@GCCalendar@@QAEXG@Z
?StopSharing@GCVariant@@AAEXXZ
?DaysBetweenDOWs@GCCalendarDateUtils@@SGJJJ@Z
?GetDayOfWeek@GCCalendar@@QBE?AW4DAYOFWEEK@1@XZ
?GetWeekOfYear@GCCalendar@@QBEGXZ
?GetYearOfWeekOfYear@GCCalendar@@QBEGXZ
?SetFirstDayOfWeek@GCCalendar@@QAEXW4DAYOFWEEK@1@@Z
?GetFirstDayOfWeek@GCCalendar@@QBE?AW4DAYOFWEEK@1@XZ
?IsValidDayOfWeek@GCCalendarDateUtils@@SG_NJ@Z
?SetWeekOfYear@GCCalendar@@QAEXG@Z
?SetMonth@GCCalendar@@QAEXG@Z
?SetYear@GCCalendar@@QAEXG@Z
?Clear@GCCalendar@@QAEXXZ
?Equals@raw_GCStr@@SG_NPB_W0@Z
?ShowDatePicker@GCMso@@SGJPBUGCDatePickerControlInfo@1@@Z
?GetTimeZoneBias@GCCalendarDateUtils@@SGJABVGCDate@@ABVGCTimeZone@@@Z
?EncodeTimeZoneBiasPair@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@JJ@Z
?FormatDayAndDate@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?FormatTimeShort@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?ParseDayAndDate@GCCalendarDateUtils@@SG_NPB_WPAVGCDate@@@Z
?IsDateInValidRange@GCCalendarDateUtils@@SG_NABVGCDate@@@Z
?ParseTime@GCCalendarDateUtils@@SG_NPB_WPAVGCDate@@@Z
?GetWorkAreaRect@GCWindowHelpers@@SG_NAAUtagRECT@@_NQAUHWND__@@PBU2@PBUtagPOINT@@@Z
?CompareNoCase@raw_GCStr@@SGJPB_W0@Z
?SetFromResource@GCStackStrBase@@QAEXKQAUHINSTANCE__@@@Z
?FormatTime@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@W4STYLE@GCDateFormat@@_N@Z
?MessageFormat@GCStackStrBase@@QAEJKQB_W000ABVGCLocale@@QAUHINSTANCE__@@@Z
?DaysBetweenDates@GCCalendarDateUtils@@SGJABVGCDate@@0@Z
?GetSecondDayOfWeekend@GCCalendarDateUtils@@SGJXZ
?GetFirstDayOfWeekend@GCCalendarDateUtils@@SGJXZ
?ms_GlobalPointersInitializationSemaphore@GCUtilDLL@@2VGCReentrantSemaphore@@A
?DrawArrowedRect@GCCalendarDrawingUtils@@SGXPAUHDC__@@PAUtagRECT@@_N2@Z
?INVALID_DATE@GCDate@@2NB
?Find@raw_GCStr@@SG_NPB_W0AAK@Z
?DayNameFromDate@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?AbbrevDayNameFromDate@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?FormatDate@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@W4STYLE@GCDateFormat@@_N@Z
?FormatDateLong@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?FormatDateShort@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@@Z
?GetDayOfMonth@GCCalendar@@QBEGXZ
?FormatDayOfMonth@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@J@Z
?FormatDateOrTimeRange@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@PB_W1@Z
?FormatDateAndTime@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@ABVGCDate@@W4STYLE@GCDateFormat@@2_N@Z
?Trim_Helper@raw_GCStr@@CG?AVGCStrRetVal@@PB_W_N11PAVGCStackStrBase@@@Z
?LengthInGlyphs@raw_GCStr@@SGKPB_W@Z
?FirstGlyphs@raw_GCStr@@SG?AVGCStrRetVal@@PB_WK@Z
?Tokenize_Helper@raw_GCStr@@CGXPB_W0PAVGCArrayStr@@PAV?$GCSet@VGCStr@@PB_WV?$GCHashMapResizeHelper@$01$00$03@@@@@Z
?DeTokenize@raw_GCStr@@SG?AVGCStrRetVal@@ABVGCArrayStr@@PB_W@Z
?IsWindowsVistaOrLater@GCOSVersionInformation@@SG_NXZ
?Add@GCCalendar@@QAEXW4FIELDID@1@J@Z
??0GCAtom@@QAE@PB_W@Z
?GetDefault@GCLocale@@SG?BV1@XZ
?deprecated_GetICUID@GCTimeZone@@QBE?AVGCStrRetVal@@XZ
?OpenCopy@raw_GCStr@@SGPA_WPB_W@Z
?MonthNameFromValue@GCCalendarDateUtils@@SGXAAVGCStackStrBase@@J_N1@Z
?WeeksInMonth@GCCalendarDateUtils@@SGJJJJ@Z
?GetFirstDayOfWorkweek@GCCalendarDateUtils@@SGJXZ
?SpansDays@GCCalendarDateUtils@@SG_NABVGCDate@@0@Z
?SetTimeZone@GCCalendar@@QAEXABVGCTimeZone@@@Z
?HandleAllErrorCatch@@YGXXZ
?HSVtoCOLORREF@GCCalendarDrawingUtils@@SGKABUHSVInfo@1@@Z
?COLORREFtoHSV@GCCalendarDrawingUtils@@SG?AUHSVInfo@1@ABK@Z
?BlendColors@GCCalendarDrawingUtils@@SGKKKJ@Z
?WeekOfYearBasedOnYearOfDate@GCCalendarDateUtils@@SGJABVGCCalendar@@@Z
?GetMonth@GCCalendar@@QBE?AW4MONTH@1@XZ
?GetYear@GCCalendar@@QBEGXZ
?SetTime@GCCalendar@@QAEXABVGCDate@@@Z
?StartOfDay@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@@Z
?ClampDateToValidRange@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@@Z
??1GCEventSourceBase@@QAE@XZ
?SelectObject@GCDCObjectSelector@@QAE_NPAX@Z
?int_Win32Error@GCError@@CG?AV1@KK@Z
??1GCError@@QAE@XZ
?int_RawError@GCError@@CG?AV1@KJ@Z
?Throw@GCError@@QBEXXZ
??1GCDate@@QAE@XZ
?CompareNoCaseWithLocale@raw_GCStr@@SGJPB_W0K_N@Z
?int_COMError@GCError@@CG?AV1@JPAUIUnknown@@ABU_GUID@@11@Z
?MakeTheCallsBase@GCEventSourceBase@@QAEXP6G_NPAXAAVGCFireCtx@@@Z0K0ABU_GUID@@@Z
?MakeTheDispatchCallsBase@GCEventSourceBase@@QAEXP6G_NPAXAAVGCFireCtx@@@Z0JKG0PBD0@Z
?Init@GCFireCtx@@QAEXAAVGCDynamicUnkArray@@@Z
??1GCAnyIPtr@@QAE@XZ
??0GCDate@@QAE@XZ
??0GCTimeZone@@QAE@PB_W@Z
?_Release@GCStr@@AAEXXZ
?Find@raw_GCStr@@SG_NPB_W_WAAK@Z
?DecodeTimeZoneBiasPair@GCCalendarDateUtils@@SGXPB_WPAJ1@Z
?ConvertDateFromForeignTimeZone@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@ABVGCTimeZone@@@Z
?ConvertDateFromForeignTimeZoneBias@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@J@Z
?SpansDaysExcludingMidnight@GCCalendarDateUtils@@SG_NABVGCDate@@0@Z
?Set@GCStr@@QAEXPB_W@Z
?ConvertDateToForeignTimeZone@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@ABVGCTimeZone@@@Z
?ConvertDateToForeignTimeZoneBias@GCCalendarDateUtils@@SG?AVGCDate@@ABV2@J@Z
?DeallocateHashTable@@YGXPAXK@Z
?ToPowerOf2@@YGKK@Z
?AllocateHashTable@@YGPAXK@Z
?HandleAllIfMethodCatch@@YGJPBU_GUID@@@Z
?Empty@GCIPtrBase@@QAEXXZ
?StartErrorBlock@GCCriticalErrorInfo@@SGX_N@Z
?EndErrorBlock@GCCriticalErrorInfo@@SGXXZ
?HandleAllNoUIErrorCatch@@YGXXZ
?ScriptHasInterfaceMethod@@YGJPAXPBXJGPAUtagDISPPARAMS@@PAUtagVARIANT@@@Z
?HandleMessageMapErrorCatch@@YGXKIJ@Z
?InterfaceSupportsErrorInfoHelper@GCoSupportErrorInfoTearOffBase@@AAEJPBXPAUIUnknown@@ABU_GUID@@@Z
_UIThreadProxyDelegatorQIHook@12
?int_ErrorBase@GCError@@CG?AV1@KJPB_W00PAUIErrorInfo@@JABU_GUID@@0K@Z
??0GCStr@@QAE@PB_W@Z
?EnumConnectionPointsBase@IConnectionPointContainerGrooveBase@@QAEJPBU_ATL_CONNMAP_ENTRY@ATL@@HPAPAUIEnumConnectionPoints@@@Z
?FindConnectionPointBase@IConnectionPointContainerGrooveBase@@QAEJPBU_ATL_CONNMAP_ENTRY@ATL@@ABU_GUID@@PAPAUIConnectionPoint@@@Z
?IGrooveDispatchImplHelper_FindMultiDispatchEntry@@YGPBUGrooveMultiDispatchEntry@@PBU1@ABU_GUID@@PB_W@Z
?IGrooveDispatchImplHelper_SetObjectReturnValue@@YGXPAVGCoScriptDispatchTearoff@@PAUtagVARIANT@@@Z
?CreateScriptDispatchTearoff@@YG?AV?$GCIPtrRetVal@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@@PBUGrooveMultiDispatchEntry@@PAUIUnknown@@_N@Z
?IGrooveDispatchImplHelper_FindMultiDispatchEntry@@YGPBUGrooveMultiDispatchEntry@@PBU1@ABU_GUID@@J@Z
?CreateScriptDispatchTearoff@@YG?AV?$GCIPtrRetVal@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@@PAUIUnknown@@_N@Z
?int_Inst@GCError@@CGPAUHINSTANCE__@@XZ
?int_RawError@GCError@@CG?AV1@KQAUHINSTANCE__@@JPB_W1KPAUIErrorInfo@@PAD@Z
?GOutputDebugString@@YGXPB_W@Z
?SAFE_EMPTY_STRING_CBSTR@raw_GCStr@@2PB_WB
?Format@GCStr@@QAAJPB_WZZ
?Append@GCStackStrBase@@QAEXQB_WK@Z
?Set@GCStackStrBase@@QAEXQB_WK@Z
?LongToString@raw_GCStr@@SGXJPAVGCStackStrBase@@J@Z
?int_DeallocateBufferIfNecessary@GCStackStrBase@@AAEXAAPA_W@Z
?GetValue@GCRegistryKey@@QBEJAAKPB_WPAK@Z
?Open@GCRegistryKey@@QAEJK@Z
??1GCRegistryKey@@UAE@XZ
??0GCRegistryKey@@QAE@W4KEY_ROOT@0@PB_W_N@Z
?IGrooveDispatchImplHelper_IsSafeForScripting@@YG_NPBUGrooveSafeForScriptingEntry@@PAUITypeInfo@@ABU_GUID@@JG@Z
?ms_MainSTAThreadId@GCGrooveThreadId@@0KA
?hr_LoadTypeLib@GCTypeLibLoader@@SGJABU_GUID@@GGKPAPAUITypeLib@@@Z
?QIBase@IConnectionPointImplBase@@QAEJABU_GUID@@PAPAX@Z
?FindInterface@GCIPtrBase@@IAE_NABU_GUID@@PAUIUnknown@@@Z
?AddSinkBase@IConnectionPointImplBase@@QAEJABU_GUID@@PAUIUnknown@@PAK@Z
?RemoveSinkBase@GCEventSourceBase@@IAEJK@Z
?int_IsRunningInGrooveProcess@GCSafeScriptingSupport@@CG_NXZ
?ms_RunningInGrooveProcess@GCSafeScriptingSupport@@0_NA
?ms_RunningProcessChecked@GCSafeScriptingSupport@@0_NA
?GrooveHandleShipAssert@@YGXPBDK0K@Z
?EnumConnectionsBase@IConnectionPointImplBase@@QAEJPAPAUIEnumConnections@@@Z
?InvokeHelper@GCDispatchDriver@@QAA_NJGGPAX_NPBDZZ
?_Release@GCVariant@@AAEXXZ
??1GCLocale@@QAE@XZ
?GetHandle@GCGrooveResourceModule@@SGPAUHINSTANCE__@@XZ
?CreateInstance@GCoUnknownEnum@@SG?AV?$GCIPtrRetVal@UIGrooveUnknownEnumCreate@@$1?IID_IGrooveUnknownEnumCreate@@3U_GUID@@B@@ABU_GUID@@0_N@Z
?GetTime@GCCalendar@@QBE?AVGCDate@@XZ
??0GCCalendar@@QAE@PBVGCDate@@PBVGCTimeZone@@PBVGCLocale@@@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
__dllonexit
_encode_pointer
_unlock
malloc
calloc
floor
ceil
free
labs
memset
wcslen
memcmp
memmove_s
memcpy_s
swprintf_s
_recalloc
_except_handler4_common
__clean_type_info_names_internal
_lock
__CxxFrameHandler3
_CxxThrowException
?GrooveDelete@@YAXPAX@Z
?GrooveNew@@YAPAXI@Z
ord52
ord61
ord48
ord60
ord47
ord42
ord35
ord11
ord10
ord26
ord27
ord43
ord44
ord53
ord23
ord51
ord50
ord30
ord64
ord22
ord18
ord15
ord55
ord19
ord31
ord58
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ