Tolk_Braille
Tolk_DetectScreenReader
Tolk_HasBraille
Tolk_HasSpeech
Tolk_IsLoaded
Tolk_IsSpeaking
Tolk_Load
Tolk_Output
Tolk_PreferSAPI
Tolk_Silence
Tolk_Speak
Tolk_TrySAPI
Tolk_Unload
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.397acd1734d286225536fd4dbeaa1080.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.397acd1734d286225536fd4dbeaa1080.exe
Resource
win10v2004-20231023-en
Target
NEAS.397acd1734d286225536fd4dbeaa1080.exe
Size
5.5MB
MD5
397acd1734d286225536fd4dbeaa1080
SHA1
5db803dc2f920733c632ac5c8ddd228e70a60346
SHA256
3a06cffe7fad23647b808928a3b750fad9f1331d8a1436c563df37bc3c85a935
SHA512
2315ca1eeca98850532c956fddb96ce9972882f3e6be5d3d414975e08b1516bedff34bcb541ab38d3ddcdc02d5b884fa9e615e829db5e99f8dd44737b1b75a50
SSDEEP
49152:bOpEzYWjrLlNT8jbE1L1RYVaCO5t8ikeuqeWURTLzTq4JEH6GbKuwvXdmeKzzvX0:Zzjft2tqeWSjOclXdmeKzzXxr6
Checks for missing Authenticode signature.
resource |
---|
NEAS.397acd1734d286225536fd4dbeaa1080.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ERR_reason_error_string
ERR_lib_error_string
ERR_get_error_all
EVP_sha256
EVP_PKEY_new_mac_key
CRYPTO_memcmp
EVP_PKEY_free
EVP_CIPHER_CTX_new
EVP_CIPHER_get_block_size
EVP_CIPHER_get_iv_length
EVP_CIPHER_get_key_length
EVP_CipherFinal
EVP_CipherUpdate
EVP_aes_128_cbc
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_CTX_set_key_length
EVP_DecryptInit_ex
EVP_CIPHER_CTX_get_iv_length
EVP_CIPHER_CTX_get_key_length
EVP_DigestSignFinal
EVP_DigestSign
EVP_DigestUpdate
EVP_EncryptInit_ex
EVP_CIPHER_CTX_get_block_size
EVP_CIPHER_CTX_get0_cipher
EVP_MD_CTX_free
EVP_DigestSignInit
EVP_MD_CTX_new
OPENSSL_init_ssl
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
CreateDirectoryW
WideCharToMultiByte
SetThreadPriority
CreateThread
CreateSemaphoreW
ResetEvent
HeapReAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
SetFilePointerEx
GetFileInformationByHandle
CreateFileW
MultiByteToWideChar
CreateSemaphoreA
ReleaseSemaphore
TerminateProcess
WakeAllConditionVariable
WakeConditionVariable
GetFileInformationByHandleEx
FindFirstFileW
LoadLibraryW
GetFinalPathNameByHandleW
GetConsoleMode
FindClose
WaitForSingleObject
SetEvent
CreateEventW
FormatMessageW
GetModuleHandleW
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetFullPathNameW
FreeLibrary
Sleep
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
GlobalFree
GlobalAlloc
GlobalSize
GlobalLock
WriteConsoleW
GlobalUnlock
TlsGetValue
FileTimeToSystemTime
CreateMutexA
LoadLibraryA
WaitForSingleObjectEx
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThread
GetCurrentProcess
ReleaseMutex
TlsSetValue
GetSystemTimeAsFileTime
SetFileCompletionNotificationModes
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
CreateIoCompletionPort
GetCurrentProcessId
SetHandleInformation
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
LocalFree
GetSystemInfo
GetProcAddress
GetModuleHandleA
FormatMessageA
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
lstrlenW
GetCurrentThreadId
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
AreFileApisANSI
GetFileAttributesExW
RedrawWindow
GetWindowLongPtrW
PostThreadMessageW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
MapVirtualKeyA
DestroyWindow
SetWindowPos
InvalidateRgn
GetSystemMetrics
RegisterTouchWindow
ChangeDisplaySettingsExW
DefWindowProcW
SetWindowDisplayAffinity
PeekMessageW
GetUpdateRect
ScreenToClient
GetMenu
OpenClipboard
CloseClipboard
GetClipboardData
GetWindowPlacement
EmptyClipboard
SetClipboardData
LoadCursorW
SetCursor
MonitorFromRect
TrackMouseEvent
GetTouchInputInfo
CloseTouchInputHandle
GetCursorPos
MonitorFromWindow
FindWindowW
GetMonitorInfoW
ValidateRect
RegisterRawInputDevices
RegisterWindowMessageA
MsgWaitForMultipleObjectsEx
SetCapture
ReleaseCapture
SystemParametersInfoA
DestroyIcon
SendMessageW
MapVirtualKeyW
SendInput
SetForegroundWindow
ShowWindow
SetWindowLongW
GetSystemMenu
EnableMenuItem
GetWindowLongW
AdjustWindowRectEx
ClientToScreen
IsProcessDPIAware
GetDC
GetWindowRect
GetRawInputData
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
GetKeyState
SetWindowPlacement
ShowCursor
ClipCursor
GetClipCursor
GetActiveWindow
MessageBoxW
GetClientRect
RevokeDragDrop
OleInitialize
RegisterDragDrop
CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemFree
GetDeviceCaps
DeleteObject
CreateRectRgn
DwmEnableBlurBehindWindow
SHGetKnownFolderPath
DragQueryFileW
DragFinish
getsockopt
shutdown
recv
send
WSASend
ioctlsocket
WSASendTo
connect
setsockopt
bind
freeaddrinfo
getsockname
WSAGetLastError
socket
htonl
htons
ntohl
ntohs
WSASocketW
WSARecvFrom
__WSAFDIsSet
getaddrinfo
select
gethostbyname
WSAStartup
WSACleanup
getpeername
WSAIoctl
closesocket
SystemFunction036
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EncryptMessage
InitializeSecurityContextW
AcceptSecurityContext
FreeContextBuffer
DecryptMessage
ApplyControlToken
FreeCredentialsHandle
AcquireCredentialsHandleA
DeleteSecurityContext
QueryContextAttributesW
CertOpenStore
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateStore
CertFreeCertificateChain
CertDuplicateCertificateChain
CertDuplicateCertificateContext
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertAddCertificateContextToStore
NtCreateFile
NtCancelIoFileEx
NtDeviceIoControlFile
RtlNtStatusToDosError
GetErrorInfo
SysStringLen
SysFreeString
SetErrorInfo
SysAllocString
timeGetDevCaps
timeGetTime
timeBeginPeriod
timeEndPeriod
BCryptGenRandom
SetWindowTheme
ImmAssociateContextEx
ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
_Thrd_join
_Thrd_yield
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??Bid@locale@std@@QEAA_KXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_sleep
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
memcmp
memcpy
__CxxFrameHandler3
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_terminate
__std_type_info_compare
memmove
__RTDynamicCast
__C_specific_handler
__current_exception
__current_exception_context
_purecall
__CxxFrameHandler4
exp
sqrt
sinf
sin
pow
fmod
round
cosf
cos
atan2
acos
_dclass
ceilf
__setusermatherr
ceil
trunc
floor
strlen
_initterm_e
_get_initial_narrow_environment
exit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_exit
_set_app_type
abort
_seh_filter_exe
terminate
_wassert
_beginthreadex
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_initterm
_controlfp_s
_initialize_narrow_environment
strtol
free
malloc
_set_new_mode
realloc
calloc
_callnewh
__p__commode
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
setvbuf
fclose
fread
fwrite
_set_fmode
_get_stream_buffer_pointers
fflush
fgetc
fgetpos
fputc
fsetpos
_fseeki64
ungetc
_unlock_file
_lock_file
___lc_codepage_func
_configthreadlocale
Tolk_Braille
Tolk_DetectScreenReader
Tolk_HasBraille
Tolk_HasSpeech
Tolk_IsLoaded
Tolk_IsSpeaking
Tolk_Load
Tolk_Output
Tolk_PreferSAPI
Tolk_Silence
Tolk_Speak
Tolk_TrySAPI
Tolk_Unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ