Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.50927741ae4b1dfa301038a6875112f0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.50927741ae4b1dfa301038a6875112f0.dll
Resource
win10v2004-20231023-en
Target
NEAS.50927741ae4b1dfa301038a6875112f0.exe
Size
408KB
MD5
50927741ae4b1dfa301038a6875112f0
SHA1
4cb46f9cc368ab5212f1f240a32be3126e52164d
SHA256
7900e248bb16691313d0d1219c64c2969ac0c0765c7e9e93a6546783e98b7968
SHA512
036971332503e55ed953b0c9d9458a90bd769386a2e64eea810836d19e30d0f399ab62e3d75ca7e95588f00d718c8ecd814936c4147aa5b4fe3b2528d625da8b
SSDEEP
12288:UOAE3LYcKk8xne3f+CenO33T1VBjvrEH7lj:UOVbaletbrEH7lj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadResource
FindResourceW
GetTickCount
LoadLibraryA
DisableThreadLibraryCalls
InterlockedExchange
GetVersionExW
Sleep
lstrcatW
GetUserDefaultLangID
GetLongPathNameW
lstrlenA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
LockResource
FindClose
FindFirstFileW
GlobalLock
GlobalUnlock
GlobalAlloc
GetTempPathW
SizeofResource
lstrcmpW
MulDiv
GlobalFree
GlobalHandle
LocalAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WideCharToMultiByte
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
FreeLibrary
GetSystemDefaultLCID
InterlockedDecrement
InterlockedIncrement
DeleteFileW
LoadLibraryExW
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleA
SetLastError
LoadLibraryW
GetThreadLocale
SetThreadLocale
lstrcmpiW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetTempFileNameW
SendMessageW
GetPropW
IsWindow
CharLowerBuffW
SetPropW
ShowWindow
SetParent
UnregisterClassA
CharNextW
FindWindowW
GetActiveWindow
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
LoadCursorW
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
FillRect
ReleaseCapture
GetClassNameW
SetCapture
InvalidateRgn
InvalidateRect
MoveWindow
GetSysColor
SetWindowContextHelpId
GetWindow
SendDlgItemMessageW
MapDialogRect
RegisterClipboardFormatW
IsClipboardFormatAvailable
DefWindowProcW
DialogBoxIndirectParamW
CreateDialogParamW
GetClassInfoExW
RegisterClassExW
ClientToScreen
GetWindowLongW
GetWindowThreadProcessId
AllowSetForegroundWindow
SetForegroundWindow
MessageBoxW
CloseClipboard
OpenClipboard
GetClipboardData
CallWindowProcW
PostMessageW
DestroyWindow
MapWindowPoints
LoadMenuW
GetSubMenu
GetSystemMetrics
SetMenuItemBitmaps
CheckMenuItem
TrackPopupMenuEx
DestroyMenu
GetDC
ReleaseDC
CreateWindowExW
UnregisterClassW
GetFocus
IsChild
SetFocus
CharUpperBuffW
GetParent
IsDlgButtonChecked
EndDialog
SystemParametersInfoW
SetWindowLongW
LoadImageW
DestroyIcon
LoadIconW
UpdateWindow
GetDlgItem
KillTimer
SetTimer
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
GetWindowRect
SetWindowPos
LoadStringW
LoadBitmapW
GetStockObject
DeleteObject
CreateFontIndirectW
StretchBlt
SetBrushOrgEx
SetStretchBltMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
BitBlt
GetDeviceCaps
CreateSolidBrush
GetObjectW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteExW
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CLSIDFromProgID
OleLockRunning
CoGetClassObject
CLSIDFromString
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoTaskMemFree
GetErrorInfo
OleCreateFontIndirect
SafeArrayCreate
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
VarCmp
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VarBstrCmp
UnRegisterTypeLi
VariantChangeType
VariantCopy
DispCallFunc
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
VarBstrCat
UrlCombineW
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0strstreambuf@std@@QAE@PBDH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADU_Size_type_nosscl@01@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?freeze@strstreambuf@std@@QAEX_N@Z
??1strstreambuf@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??3@YAXPAX@Z
wcsstr
malloc
free
memcpy_s
_CxxThrowException
wcsncpy_s
wcsncpy
??_V@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_purecall
_recalloc
memcmp
wcsncmp
wcscpy_s
wcscat_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_wcslwr
_waccess
tolower
__clean_type_info_names_internal
wcslen
??0exception@std@@QAE@XZ
wcscmp
_wsplitpath_s
memmove_s
_snwprintf
_resetstkoflw
_wcsicmp
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
memset
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
_wsplitpath
swprintf_s
calloc
_wfopen
fclose
wcsncat_s
wcsnlen
iswcntrl
_set_invalid_parameter_handler
vwprintf_s
wcsrchr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ