DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
WMCreateStreamForURL
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a81f533f6dc4f507672619d80a9945f0_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a81f533f6dc4f507672619d80a9945f0_JC.dll
Resource
win10v2004-20231020-en
Target
NEAS.a81f533f6dc4f507672619d80a9945f0_JC.exe
Size
556KB
MD5
a81f533f6dc4f507672619d80a9945f0
SHA1
a15f7f1258aca5a634c3129521b4aadf978598b3
SHA256
4b690c74fe53ea49b95293bbee1a46b8103aa279f77e8c743a06f21e07ba333a
SHA512
dae5ba8dc4157bb6c49256efddc4a059b53f710f998fee751e8a4421b4e03d44ba8b1bdfd3330403a5353ea7a8d37f496ffea0cf9582ed15fa4937214637101f
SSDEEP
12288:pWAua+dg/vtE6qxuKe7U85OeOAPHSQwbEZOvgEnA/:8trHeOAfSdbvvhnA
Checks for missing Authenticode signature.
resource |
---|
NEAS.a81f533f6dc4f507672619d80a9945f0_JC.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
FreeLibrary
InterlockedExchange
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent
InterlockedDecrement
GetLastError
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
CreateEventW
WaitForSingleObject
RaiseException
InitializeCriticalSection
GetVersion
LoadLibraryExA
LoadLibraryExW
LoadResource
SizeofResource
lstrcmpiW
lstrlenW
FindResourceW
GetLocaleInfoA
GetUserDefaultLCID
GetFileAttributesA
GetFileAttributesW
GetFullPathNameA
GetFullPathNameW
DeleteFileA
GetTempPathA
GetTempFileNameA
MoveFileA
FlushFileBuffers
GetFileSize
GetFileTime
LockFile
ReadFile
SetEndOfFile
SetFilePointer
SetFileTime
UnlockFile
CloseHandle
CreateFileA
DeleteFileW
GetDriveTypeA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
MoveFileW
GetVolumeInformationA
GetCurrentDirectoryA
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GlobalMemoryStatus
LocalAlloc
LoadLibraryA
TlsAlloc
EncodePointer
GetCommandLineA
DecodePointer
GetCurrentThreadId
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
ResetEvent
SetEvent
GetVersionExW
GetFileAttributesExW
GetFileAttributesExA
CreateFileW
GetProcessHeap
HeapValidate
RegDeleteKeyA
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
CLSIDFromString
CreateBindCtx
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoGetMalloc
StringFromGUID2
CoGetClassObject
StringFromCLSID
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
WMCreateStreamForURL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ