Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9b4535b2724e0e73ed561e556e29f850.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.9b4535b2724e0e73ed561e556e29f850.dll
Resource
win10v2004-20231020-en
Target
NEAS.9b4535b2724e0e73ed561e556e29f850.exe
Size
132KB
MD5
9b4535b2724e0e73ed561e556e29f850
SHA1
524a9ba2b752594e04a77ede4ac898a32e7043d4
SHA256
a0aa841a02d10c190982e795f438d674c8c70023a9e27e073a59e72ab3424a21
SHA512
4819b0839d0bfc9a588af72dc4ee55c0c85f79f72ee991436ce407e9914c6c29415acf4cfaae74101aa032675c553d6331dffd79b27eb3993e6e11100a2cdb9d
SSDEEP
3072:D6UFurgJxylpNKQzVSlguYA/NJZ1oa9qQPN8wafSnF6:ArgJxyVKQzVFGJc108lF
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord4082
ord12888
ord7905
ord2027
ord11928
ord11927
ord14380
ord12474
ord7964
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord993
ord6831
ord3844
ord5894
ord4656
ord8180
ord12194
ord12162
ord5228
ord5528
ord5739
ord9305
ord5504
ord12869
ord4655
ord4143
ord3841
ord2241
ord4807
ord8322
ord14334
ord5742
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord10202
ord9166
ord12826
ord1529
ord1526
ord1044
ord310
ord300
ord316
ord8146
ord4315
ord1661
ord1507
ord8429
ord7618
ord1468
ord9353
ord8347
ord14507
ord7886
ord14509
ord12484
ord12485
ord2484
ord5336
ord8285
ord7961
ord4580
ord12806
ord8718
ord2986
ord12190
ord10383
ord8717
ord12182
ord1510
ord325
ord1051
ord2359
ord324
ord1050
ord2406
ord2409
ord2372
ord2408
ord485
ord2263
ord2370
ord2178
ord2294
ord2397
ord486
ord1509
GetModuleHandleA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
LocalFree
LocalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
OutputDebugStringW
GetModuleFileNameW
SetLastError
OutputDebugStringA
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
UnregisterClassA
SysFreeString
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
??1CDALog@@QAE@XZ
?storage@CDALog@@QAEXPBD00_N1@Z
??RCDALog@@QAEAAV0@W4Lvl@0@@Z
?Write@CDALog@@QAAXPBDZZ
??0CDALog@@QAE@XZ
JDUpdateQuote
JDRemoveQuote
JDUpdateData
JDAddQuote
?Preload@CSymbolCache@symbolcache@@SA?AW4SymbolCacheErrors@2@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
__std_terminate
memcpy
memset
memmove
_CxxThrowException
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__std_type_info_destroy_list
_purecall
_recalloc
free
_invalid_parameter_noinfo
_initterm_e
_initterm
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_errno
_mbsrchr
??0CStockKey2@@QAE@ABV0@@Z
??0CStockKey2@@QAE@XZ
??0CStockkeyPoolMgr2@@QAE@ABV0@@Z
??0CStockkeyPoolMgr2@@QAE@H@Z
??1CStockKey2@@UAE@XZ
??1CStockkeyPoolMgr2@@QAE@XZ
??4CStockKey2@@QAEAAV0@ABV0@@Z
??4CStockkeyPoolMgr2@@QAEAAV0@ABV0@@Z
??_7CStockKey2@@6B@
??_FCStockkeyPoolMgr2@@QAEXXZ
?AddPoolStockKey@CStockkeyPoolMgr2@@QAE_NABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N1@Z
?AddPoolStockKeys@CStockkeyPoolMgr2@@QAE_NABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?AddQuoteListWithData@CStockkeyPoolMgr2@@QAEKABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N1@Z
?AddRefKData@CStockKey2@@QAE_NH@Z
?AddRefOtherTickMinData@CStockKey2@@QAE_NH@Z
?CheckStockkey@CStockkeyPoolMgr2@@QAEXABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?ClearOtherTickMinData@CStockKey2@@QAE_NXZ
?ClearPoolStockKey@CStockkeyPoolMgr2@@QAEXXZ
?ClearSymbolTickData@CStockKey2@@QAE_NXZ
?Create@CStockKey2@@QAEPAV1@PAVIStockKey@JDService@@@Z
?Create@CStockKey2@@QAE_NPAVIJDService@JDService@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?CreateStockKey@CStockkeyPoolMgr2@@AAE?AV?$shared_ptr@VCStockKey2@@@boost@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?DelPoolStockKey@CStockkeyPoolMgr2@@QAE_NABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DelPoolStockKey@CStockkeyPoolMgr2@@QAE_NPAVCStockKey2@@@Z
?DoJDSDataNotify@CStockkeyPoolMgr2@@QAEJIJ@Z
?FindSpread@CStockKey2@@QAEJPAVIFormatHelper@JDService@@JPAH@Z
?GetAttr@CStockKey2@@QAEPBUStockAttr@JDService@@XZ
?GetAttrField@CStockKey2@@QAEJH@Z
?GetAttrFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HHH@Z
?GetDBLotSize@CStockKey2@@QBEJW4FREQ_TYPE@JDService@@@Z
?GetDecimalPoint@CStockKey2@@QBEHXZ
?GetField@CStockKey2@@QAEJH@Z
?GetFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@HHH@Z
?GetIJDService@CStockkeyPoolMgr2@@AAEPAVIJDService@JDService@@XZ
?GetKData@CStockKey2@@QAEPAVISymbolInstantKData@JDService@@H@Z
?GetMaxUnusedPoolSize@CStockkeyPoolMgr2@@QBEHXZ
?GetOtherMinTickCount@CStockKey2@@QAEHH@Z
?GetOtherMinTickField@CStockKey2@@QAEJHHW4Field@JDServiceField@@@Z
?GetOtherTickMinData@CStockKey2@@QAEPAVISymbolOtherTickMin@JDService@@H@Z
?GetPoolStockKey@CStockkeyPoolMgr2@@QBEPAVCStockKey2@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetPriceDiffString@CStockKey2@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@JJ@Z
?GetPriceField@CStockKey2@@QAEJH@Z
?GetPriceFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@H@Z
?GetReadID@CStockKey2@@QAE_NAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetStringField@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HHH@Z
?GetTickField@CStockKey2@@QAEJHHH@Z
?GetTickFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@HHHHH@Z
?GetTickPriceField@CStockKey2@@QAEJHHH@Z
?GetTickPriceFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@HHHHH@Z
?GetTickSize@CStockKey2@@QAEHH@Z
?GetTickVolumeField@CStockKey2@@QAENHHH@Z
?GetTickVolumeFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@HHHHH@Z
?GetTokens@CStockkeyPoolMgr2@@ABE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@D@Z
?GetTradingUnit@CStockKey2@@QAEJXZ
?GetVolumeField@CStockKey2@@QAENH@Z
?GetVolumeFieldString@CStockKey2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVIFormatHelper@JDService@@HHH@Z
?Init@CStockkeyPoolMgr2@@QAE_NPAVIJDService@JDService@@@Z
?IsMyID@CStockKey2@@QAE_NABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?IsPricelegal@CStockKey2@@AAE_NJ@Z
?IsTFXStockM@CStockKey2@@QAE_NXZ
?OnHistDataChangeNotify@CStockKey2@@QAE_NHJJJHHJAAH0@Z
?OnMinDataNotify@CStockKey2@@QAE_NXZ
?OnSymbolQuoteNotify@CStockKey2@@QAE_NXZ
?OnSymbolSunriseNotify@CStockKey2@@QAE_NXZ
?OnSymbolTickListNotify@CStockKey2@@QAE_NPAURTDataArgs@JDService@@AAV?$vector@PAURTDataArgs@JDService@@V?$allocator@PAURTDataArgs@JDService@@@std@@@std@@@Z
?OnSymbolTickNotify@CStockKey2@@QAE_NPAURTDataArgs@JDService@@HAAV?$vector@PAURTDataArgs@JDService@@V?$allocator@PAURTDataArgs@JDService@@@std@@@std@@@Z
?ReclaimPoolStockKey@CStockkeyPoolMgr2@@QAEXXZ
?RefTAData@CStockKey2@@QAE_NH@Z
?RefTickID@CStockKey2@@QAE_NH@Z
?Release@CStockKey2@@QAEXXZ
?RemoveOtherTickMinData@CStockKey2@@QAE_NH@Z
?RemoveQuoteListWithData@CStockkeyPoolMgr2@@QAE_NK@Z
?RemoveRefKData@CStockKey2@@QAE_NH@Z
?RenewPoolStockKey@CStockkeyPoolMgr2@@QAE_NABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Search@CStockkeyPoolMgr2@@QBEPAVCStockKey2@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetIJDService@CStockkeyPoolMgr2@@AAEXPAVIJDService@JDService@@@Z
?SetMaxUnusedPoolSize@CStockkeyPoolMgr2@@QAEXH@Z
?UnrefTickID@CStockKey2@@QAE_NH@Z
?UpdateHistK@CStockKey2@@AAE_NJJHHJ@Z
?UpdateMinTick@CStockKey2@@QAE_NH@Z
?UpdateOtherTick@CStockKey2@@AAE_NHH@Z
?UpdateOtherTickMinData@CStockKey2@@QAE_NXZ
?UpdateQuote@CStockKey2@@QAE_NXZ
?UpdateQuoteListWithData@CStockkeyPoolMgr2@@QAE_NKABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N1@Z
?UpdateRTK@CStockKey2@@AAE_NHH@Z
?UpdateRefTick@CStockKey2@@QAE_NH@Z
?UpdateStocksData@CStockkeyPoolMgr2@@QAEXJABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?UpdateSymbolTickData@CStockKey2@@QAE_NXZ
?UpdateTick@CStockKey2@@QAE_NHHH@Z
?UseCount@CStockkeyPoolMgr2@@QBEJPAVCStockKey2@@@Z
?swap@CStockkeyPoolMgr2@@QAEXAAV1@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ