DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0ece01785cfc2efb7dce202856bc2950.dll
Resource
win7-20231020-en
Target
NEAS.0ece01785cfc2efb7dce202856bc2950.exe
Size
701KB
MD5
0ece01785cfc2efb7dce202856bc2950
SHA1
1a310e3d93ab37ae5311d806819dc173956d4baf
SHA256
8780090d8b41b6cbc15664bb6eae1e2f3e351e512d4097b0c8b1d47624d78000
SHA512
71ae894ea6877ce8f2b877be4edcdc79334127eaff016e82eaea3fffc21bfacd5a6a0d06a23da1289574a21fac05032e888ec8ef6ab236f69d0424b92603654b
SSDEEP
12288:NlURjVRSoI/UH1ZuO04tmbhSDhSf57CjpEc5AL7brvdodC6NS0LD2bz:NaV0ofGFbEDh+5ApEgATrveNS0L6bz
Checks for missing Authenticode signature.
resource |
---|
NEAS.0ece01785cfc2efb7dce202856bc2950.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
fopen_s
fwprintf_s
fclose
vsprintf_s
wcscpy_s
vswprintf_s
wcsrchr
_wcslwr_s
swscanf_s
_CIsin
_CIcos
??3@YAXPAX@Z
_CItan
_CIasin
_CIacos
_CIatan
_CIexp
_CIlog
_CIsinh
_CIcosh
_CItanh
ceil
rand
_CIsqrt
iswdigit
_wcsnicmp
floor
_CIfmod
memset
_CIlog10
_CIpow
wcsncmp
wcstod
wcsstr
wcschr
memmove
iswspace
memcpy
??2@YAPAXI@Z
_wcsicmp
RegEnumKeyExW
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
SetViewportOrgEx
SetStretchBltMode
GetRgnBox
GetClipRgn
CreateRectRgn
GetViewportOrgEx
GetDeviceCaps
DeleteObject
QueryPerformanceCounter
VirtualProtect
DisableThreadLibraryCalls
GetSystemDirectoryA
GetSystemDirectoryW
FreeLibrary
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
IsBadReadPtr
GetTickCount
IsBadWritePtr
CreateThread
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CloseHandle
CreateEventA
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
LoadLibraryA
SetEvent
FreeLibraryAndExitThread
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
CreateProcessA
GetTempFileNameA
GetTempPathA
HeapFree
HeapAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
IsBadCodePtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitializeEx
CLSIDFromProgID
CoCreateInstance
CoGetInterfaceAndReleaseStream
SysAllocStringLen
VariantChangeTypeEx
SetErrorInfo
LoadRegTypeLi
SysFreeString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
VariantClear
VariantCopy
SysStringLen
SysAllocString
VariantInit
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrStubCall2
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
GetWindowLongA
PeekMessageA
TranslateMessage
GetDC
ReleaseDC
SetRectEmpty
EqualRect
DestroyWindow
RegisterClassA
CreateWindowExA
SetWindowLongA
SetTimer
KillTimer
DefWindowProcA
DispatchMessageA
PostMessageA
RegisterClassExA
MsgWaitForMultipleObjects
InternetCanonicalizeUrlW
InternetCombineUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ