DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7f833aaec37f1472baf65e7b3fe50e50.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7f833aaec37f1472baf65e7b3fe50e50.dll
Resource
win10v2004-20231023-en
Target
NEAS.7f833aaec37f1472baf65e7b3fe50e50.exe
Size
36KB
MD5
7f833aaec37f1472baf65e7b3fe50e50
SHA1
a02fd43ef4681b9c1ba41fd0b1c065440e62d00e
SHA256
0e17c8425aa9a7af9ad72a7d15374bd01e686595f84e79cacfa1af4e353e492a
SHA512
187fe22c2bfad0389da30cf38859e5cd59f2026d565828a97b2e41b91ce7142056fd597e873a6f62b26ec54d0bb8ec553b176ae47c3dc8f87752e7439c1f3ec9
SSDEEP
192:IiSyM3rKajdEZ5Yv1S4ILoiIAfrIAaaDG:IiSIaZEd4ILouiaDG
Checks for missing Authenticode signature.
resource |
---|
NEAS.7f833aaec37f1472baf65e7b3fe50e50.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ