DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d7df91c1840c916d04a733edf42b0b90.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d7df91c1840c916d04a733edf42b0b90.dll
Resource
win10v2004-20231020-en
Target
NEAS.d7df91c1840c916d04a733edf42b0b90.exe
Size
126KB
MD5
d7df91c1840c916d04a733edf42b0b90
SHA1
2978bc476f08cf56ea53c27c4c488bcc2523d80f
SHA256
707170f6057550b38ea564a06e404743436b855ea8e03e352487423bf72748c4
SHA512
4959fda96fed47522088cdb3cf1328e0bb05045dc2700cea4addf47d83a384d7cac818b9c68984ef12b28d9ce80ab514db0a83e7c2a9126457738ec72f2da905
SSDEEP
1536:Ox+xbfj45gXBN5tSqCWAmf2PCthzRlTOz2+Jyu6pPQ4zl3V2DxQ/PkIs:G+xTj45gxNyqCWRlfw9n23V2DxQEIs
Checks for missing Authenticode signature.
resource |
---|
NEAS.d7df91c1840c916d04a733edf42b0b90.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
GetCurrentProcess
GetCurrentThreadId
VirtualAlloc
GetVersionExW
DisableThreadLibraryCalls
GetProcAddress
lstrlenW
GetTickCount
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
CloseHandle
lstrcmpW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
GetSystemTime
GetModuleHandleW
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LCMapStringW
SetStdHandle
GetConsoleCP
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCommandLineA
RtlUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetModuleHandleA
WriteFile
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
ReleaseDC
wsprintfW
SetRectEmpty
GetDC
GetTextExtentPoint32W
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
ExtTextOutW
CreateFontW
CreateDIBitmap
GetSystemPaletteEntries
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ