DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3f0206cf2a03e3c33eca75cffc2e7440.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3f0206cf2a03e3c33eca75cffc2e7440.dll
Resource
win10v2004-20231023-en
Target
NEAS.3f0206cf2a03e3c33eca75cffc2e7440.exe
Size
400KB
MD5
3f0206cf2a03e3c33eca75cffc2e7440
SHA1
4bdd184477e87e3dddc995d42c2741a2d1d1ff12
SHA256
7c801c081fc5a48aece55bdd584ff7ec1b283d0d7e213e3068c2583c45b9160f
SHA512
b0b3d6bdccf216ce4d9d111d4eb3d857d8ae6f05a215796027e7c246609e0b2e78a4ee443f5b4f36c8bd6af91f59ec39cb046aa83e87c7abb4956584dc8564ff
SSDEEP
6144:ATv8W3bTWXPyyYQHbc2nTYySZ47NN7loy1lZOw7DH:UvrnyDbRYi77ljT7
Checks for missing Authenticode signature.
resource |
---|
NEAS.3f0206cf2a03e3c33eca75cffc2e7440.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AcquireSRWLockExclusive
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
FormatMessageA
GetCurrentThread
GetEnvironmentVariableW
GetFileAttributesA
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
SetThreadPriority
SizeofResource
Sleep
SleepConditionVariableSRW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
_vsnprintf
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_errno
_fseeki64
_read
_stat64
_strdup
_wfopen
_write
atoi
calloc
cos
cosf
fclose
feof
fflush
fgetpos
fread
free
ftell
fwrite
getenv
log
malloc
memcmp
memcpy
memmove
memset
pow
rand
realloc
sin
sinf
sqrt
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncpy
GetAsyncKeyState
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ