Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0241faa5a67f69cd2c94386ca6cc7e80_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0241faa5a67f69cd2c94386ca6cc7e80_JC.exe
Resource
win10v2004-20231023-en
Target
NEAS.0241faa5a67f69cd2c94386ca6cc7e80_JC.exe
Size
1.4MB
MD5
0241faa5a67f69cd2c94386ca6cc7e80
SHA1
a4fedcd89873ab2a7ea00937958155f6f491a62e
SHA256
b9680b24d4fe1f43743415b4967cba3c90b638c7099c95907323c46b84a0e83d
SHA512
89a641a5ce8acc21b75d84e9e25431b3ba8573efcc964f1d9e27678c830f7e7343029f3035fcf2ab075feaac074fdd6ec36a8e385802a4b6a669c2a3444612b1
SSDEEP
12288:dZmsC+UWIYKE/lTxxm+DIYwkISG0LPVV0bhIGk+fYMN7QUF5SyiaDK6wqCzyaRmq:jSjrEzH0FcU2f0ZX+n359qsRe4gK
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
mciSendCommandA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
CM_Get_DevNode_Status
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
CM_Get_Parent
CM_Get_Device_ID_Size
SetupDiGetDeviceInstallParamsA
SetupDiClassNameFromGuidA
CM_Query_And_Remove_SubTreeA
CM_Request_Device_EjectA
SetupDiEnumDeviceInfo
CM_Get_Device_IDA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
NetWkstaGetInfo
NetApiBufferFree
GetAdaptersInfo
SendARP
GetIfEntry
GetIfTable
GetNetworkParams
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
SRRemoveRestorePoint
SRSetRestorePointA
Ntrrscfd_LogCallbackInit
SetClearReadOnlyDisk
GetCurrentReadOnlyDisk
SetDeleteReadOnlyDisk
Ntrrscfd_rtSearch_Control
Ntrrscfd_SecurityFolderClear
Ntrrscfd_rtSearch_Init
SetAddLogDisk
Ntrrscfd_ClearHiddenPath
Ntrrscfd_SetHiddenPath
SetAddReadOnlyDisk
GetModuleFileNameExA
EnumProcessModules
MiniDumpWriteDump
?NtrMptpfd_Init@@YAHXZ
?NtrMptpfd_Install@@YAIPAD@Z
?NtrMptpfd_Start@@YAIXZ
?NtrMptpfd_Stop@@YAIXZ
?NtrMptpfd_UnInit@@YAHXZ
?SetPolicy@@YAHK@Z
GetVolumeNameForVolumeMountPointA
WideCharToMultiByte
lstrlenW
CreateDirectoryA
FormatMessageA
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
EnterCriticalSection
OpenFileMappingA
GetTickCount
RemoveDirectoryA
GetEnvironmentVariableA
GetSystemInfo
DeleteCriticalSection
GetFileAttributesA
GetCurrentDirectoryA
VirtualQuery
lstrcatA
GetSystemTimeAsFileTime
lstrlenA
GetCurrentProcessId
RaiseException
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
GetFileSize
GlobalMemoryStatus
lstrcpynA
FindFirstFileA
ResetEvent
CreateEventA
FlushFileBuffers
SetEvent
QueryDosDeviceA
SetThreadPriority
SuspendThread
InterlockedIncrement
InterlockedDecrement
LoadResource
FindResourceA
LockResource
GlobalUnlock
GlobalLock
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
GetPrivateProfileIntA
WritePrivateProfileStringA
SetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FindNextFileA
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
DuplicateHandle
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
FileTimeToSystemTime
GetTempFileNameA
GetDiskFreeSpaceA
CreateSemaphoreA
ReleaseSemaphore
WaitForMultipleObjects
MulDiv
SetErrorMode
GetProcessVersion
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SizeofResource
GetCPInfo
GetOEMCP
GlobalSize
RtlUnwind
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetFileType
GetStartupInfoA
GetCommandLineA
HeapReAlloc
CreateThread
ExitThread
GetACP
HeapSize
FatalAppExitA
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateProcessA
ProcessIdToSessionId
lstrcmpiA
GetProcessHeap
HeapAlloc
HeapFree
lstrcpyA
GetDiskFreeSpaceExA
MultiByteToWideChar
FindFirstFileW
FindNextFileW
FindClose
GetLogicalDrives
GlobalAlloc
GlobalFree
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
WaitForSingleObject
GetExitCodeThread
FreeLibrary
SetPriorityClass
GetModuleHandleA
DeviceIoControl
GetVersionExA
GetDriveTypeA
GetVersion
WriteFile
SetFilePointer
ReadFile
CreateFileA
LocalFree
OutputDebugStringA
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultUILanguage
GetLocalTime
GetSystemDirectoryA
GetVolumeInformationA
GetTempPathA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
GetWindowsDirectoryA
CopyFileA
CreateMutexA
ReleaseMutex
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
GetLastError
OpenProcess
GetExitCodeProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetCurrentThreadId
Sleep
ResumeThread
UnregisterClassA
LoadCursorA
GetSysColorBrush
PtInRect
GetDialogBaseUnits
InsertMenuA
DeleteMenu
GetMenuStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
InflateRect
RegisterClipboardFormatA
AppendMenuA
RemoveMenu
DestroyIcon
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
WaitMessage
MapDialogRect
SetWindowContextHelpId
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetLastActivePopup
SetCursor
DestroyMenu
PostQuitMessage
GrayStringA
EndPaint
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
OemToCharA
CharToOemA
GetMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
PeekMessageA
TranslateMessage
DispatchMessageA
CharUpperA
GetClassNameA
MessageBoxA
wvsprintfA
SetWindowsHookExA
CallNextHookEx
LoadIconA
PostThreadMessageA
GetWindow
GetParent
wsprintfW
RegisterDeviceNotificationA
RegisterWindowMessageA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
KillTimer
SendMessageA
SetActiveWindow
ExitWindowsEx
UnregisterDeviceNotification
GetClassInfoA
RegisterClassA
SetTimer
LoadMenuA
GetSubMenu
GetCursorPos
SetForegroundWindow
FindWindowExA
IsWindowUnicode
MessageBeep
GetWindowRect
GetSystemMetrics
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
EnableWindow
wsprintfA
UpdateWindow
PostMessageA
FindWindowA
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
DrawTextA
EndDialog
TabbedTextOutA
LoadAcceleratorsA
SetRectEmpty
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MsgWaitForMultipleObjects
LoadStringA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
IsWindow
SetMenu
InvalidateRect
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowOwnedPopups
ShowScrollBar
UnhookWindowsHookEx
SetWindowTextA
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
LineTo
MoveToEx
OffsetClipRgn
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
IntersectClipRect
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetTextColor
GetBkColor
SetTextJustification
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
DPtoLP
SetTextAlign
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateDIBPatternBrushPt
CreateBitmap
CreatePatternBrush
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
RegEnumKeyExA
GetNamedSecurityInfoA
GetAce
RegCreateKeyA
ControlService
QueryServiceStatus
DeleteService
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
DuplicateTokenEx
SetTokenInformation
LookupAccountSidA
ImpersonateLoggedOnUser
CreateProcessAsUserA
RevertToSelf
RegEnumKeyA
RegDeleteKeyA
GetTokenInformation
ConvertSidToStringSidA
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
GetUserNameA
RegQueryValueA
RegSetValueA
GetFileSecurityA
RegQueryInfoKeyA
RegOpenKeyA
SetFileSecurityA
DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
SHChangeNotify
Shell_NotifyIconA
SHGetFolderPathA
ShellExecuteExA
SHGetPathFromIDListA
ShellExecuteA
ExtractIconA
ord17
ord8
WriteClassStg
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleRun
CoDisconnectObject
OleInitialize
OleUninitialize
WriteFmtUserTypeStg
OleDuplicateData
CreateBindCtx
SetConvertStg
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
CoFreeUnusedLibraries
ord253
SafeArrayPutElement
SafeArrayPtrOfIndex
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayGetElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysReAllocStringLen
SysStringLen
LoadTypeLi
SysFreeString
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SysAllocStringLen
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
htonl
htons
bind
accept
getpeername
ntohs
WSAGetLastError
WSAAsyncSelect
send
inet_ntoa
inet_addr
select
recvfrom
sendto
WSAStartup
socket
gethostbyname
closesocket
WSACleanup
recv
ioctlsocket
connect
getsockname
WSASetLastError
WTSFreeMemory
WTSEnumerateSessionsA
WTSQueryUserToken
DestroyEnvironmentBlock
CreateEnvironmentBlock
_LockDisk@12
_UnLockDisk@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ