DirectXFileCreate
DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fadece4f60cc4615fa36dfad72728c80.dll
Resource
win10v2004-20231020-en
Target
NEAS.fadece4f60cc4615fa36dfad72728c80.exe
Size
197KB
MD5
fadece4f60cc4615fa36dfad72728c80
SHA1
8f2a8a26a6bdb1e1a895a445576b4dba4bcdb558
SHA256
1d5a18bd29b8ad5290d18824c9204174f5594ece26dc140d32ca2711e2ee86f3
SHA512
aac59c2271d16efeb6c29ea6f2381f97f94b79d6307b08d48bca3ff244b8fb08284fbec1d83487a8cea543409dd1f5ddf5d90809a110233d228ff75fb586a628
SSDEEP
3072:lV2QPKBM7vq61bcG9RbSkzZbEVGYCmoZIihpQUDILXBJJ7cCH7nj:OQPC6TdidihpQxJlzj
Checks for missing Authenticode signature.
resource |
---|
NEAS.fadece4f60cc4615fa36dfad72728c80.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
memcpy
_except_handler4_common
_initterm
malloc
_amsg_exit
_XcptFilter
vsprintf_s
_vscprintf
free
setlocale
_strdup
isalpha
atol
atof
isspace
isalnum
isdigit
sscanf_s
isxdigit
_purecall
memcmp
memset
LockResource
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapCreate
MoveFileA
ReadFile
SetFilePointer
WriteFile
GetTempFileNameA
DeleteFileA
WaitForMultipleObjects
CreateEventA
InitializeCriticalSection
EnterCriticalSection
SetEvent
WaitForSingleObject
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
lstrcmpiA
lstrcmpA
lstrlenA
FindResourceA
LoadResource
CreateThread
SizeofResource
FreeResource
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LoadLibraryA
GetProcAddress
DirectXFileCreate
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ