PSLL_DeleteObject
PSLL_GetObject
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.25f8c6253ebc550811ea44e2b5731db0.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.25f8c6253ebc550811ea44e2b5731db0.dll
Resource
win10v2004-20231020-en
Target
NEAS.25f8c6253ebc550811ea44e2b5731db0.exe
Size
64KB
MD5
25f8c6253ebc550811ea44e2b5731db0
SHA1
ec3ef022713188ce9da28bf28d913d759f647292
SHA256
783a5bc803e67c4acec8b61368bacc4587a76048fa2e68a2c6b4b07a7c085898
SHA512
011992ea554aad8b589a74516a8952502cc32002f0178cc3649f1c88660a21303febcefc10f895bff7b81db151b6121a418dcb7f1c70cd79379687197be2628a
SSDEEP
768:9wL3NScEFk/jt6pxpY+KwRxk9wdkxWZRnOtjxIbG+njzqiH:gwkb8pXfXaGkQZRExIb1nlH
Checks for missing Authenticode signature.
resource |
---|
NEAS.25f8c6253ebc550811ea44e2b5731db0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetVersionExA
Sleep
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
CreateMutexA
CreateEventA
SetEvent
GetOverlappedResult
WaitForMultipleObjects
ReadFile
ResetEvent
WriteFile
ReleaseMutex
GetLastError
CloseHandle
WaitForSingleObject
DeviceIoControl
FreeSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
vsprintf
malloc
free
_timezone
localtime
mktime
gmtime
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
strchr
printf
_beginthreadex
_initterm
_adjust_fdiv
_ltoa
PSLL_DeleteObject
PSLL_GetObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ