DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9fd3b543bcbbfc085c164a9cf0a63e40.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9fd3b543bcbbfc085c164a9cf0a63e40.dll
Resource
win10v2004-20230915-en
Target
NEAS.9fd3b543bcbbfc085c164a9cf0a63e40.exe
Size
243KB
MD5
9fd3b543bcbbfc085c164a9cf0a63e40
SHA1
fa97d37fbf5758e44bdcca4293f7fab4e69cc6ab
SHA256
4491a475f1e974221f8122579c7fc79736b4af6b9c2799a27fcb9bc097860d35
SHA512
cf628aae2c8c673d1704da92b6247f16b0bdd4764e736415959bbc7890f453bafe53e856ee7eb6f1fd6b9267286d0206c9e290a0e7f4bcedd4b31cb54da1e3dc
SSDEEP
3072:QQig3Y4r8RlEo06HQQLKLYdCUMKNBRbSQbMg272UYCmoLYihpSCrDaUIoXBJ//cL:Yg3Y73SU/EaJihpSCv/q8
Checks for missing Authenticode signature.
resource |
---|
NEAS.9fd3b543bcbbfc085c164a9cf0a63e40.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_allmul
_allrem
wcstombs
_alldiv
memset
_wcsicmp
ord1
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
free
malloc
time
srand
rand
_purecall
__CxxFrameHandler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
DisableThreadLibraryCalls
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CreateStreamOnHGlobal
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ