DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.73aac5d032680a0f3ce51401b1defb70.dll
Resource
win10v2004-20231020-en
Target
NEAS.73aac5d032680a0f3ce51401b1defb70.exe
Size
2.6MB
MD5
73aac5d032680a0f3ce51401b1defb70
SHA1
214d75948f80dda0e121fbf6095175114ff8e100
SHA256
4eeffaf3872e7cde8d5a9e6d9451fd7136b2a16bdaf6760f4f9ea07ec6f01717
SHA512
c6194148491cb736630c61a57b02198bdac2f4b067d53cc895298cdbfc0ecd0c9ed97dacbacae34ab334f6bbe0dec46b6455e3089002a82af715f87af0fedc84
SSDEEP
49152:u3AYIN45MFaGRjB8GRo79WjeOXLkrjyZoRgU50:1VyWk44s
Checks for missing Authenticode signature.
resource |
---|
NEAS.73aac5d032680a0f3ce51401b1defb70.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_initterm
_initterm_e
_o__ismbblead
_o__malloc_base
_o__purecall
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
memcpy
_o_abort
_o_free
_o_malloc
_o_memset
_o_realloc
_o_setlocale
_o_strcpy_s
_o_terminate
_o_wcscat_s
_o_wcscpy_s
__C_specific_handler
_CxxThrowException
_o__free_base
_o__execute_onexit_table
_o__errno
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__crt_atexit
_o__calloc_base
_o__callnewh
__RTtypeid
strchr
__CxxFrameHandler3
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___std_type_info_name
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___pctype_func
_o____mb_cur_max_func
_o____lc_locale_name_func
_o____lc_collate_cp_func
_o____lc_codepage_func
memmove
memcmp
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
CryptCreateHash
CryptAcquireContextW
CryptHashData
CryptGetHashParam
CryptDestroyKey
CryptReleaseContext
CryptVerifySignatureW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyExW
RegCreateKeyExW
RegSetValueExW
CoTaskMemFree
CoCreateInstance
StringFromCLSID
IIDFromString
RaiseFailFastException
EventWrite
EventEnabled
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
QueryPerformanceCounter
QueryPerformanceFrequency
IsProcessorFeaturePresent
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentProcessorNumberEx
TerminateProcess
GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemFirmwareTable
GetLocalTime
GetTickCount64
GetSystemTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError
GetModuleFileNameA
FreeLibrary
SizeofResource
LockResource
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
LoadStringW
GetModuleHandleExW
GetModuleHandleW
LoadResource
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
ResetEvent
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeConditionVariable
SleepConditionVariableCS
CreateEventW
WakeConditionVariable
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable
FileTimeToSystemTime
SystemTimeToFileTime
FindResourceW
UuidCompare
LocalAlloc
LocalFree
LocalReAlloc
CryptMsgControl
CertCloseStore
CertGetEnhancedKeyUsage
CryptMsgOpenToDecode
CryptMsgUpdate
CryptMsgGetParam
CryptMsgClose
CryptDecodeObjectEx
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertOpenStore
CryptImportPublicKeyInfo
CertAddCertificateContextToStore
CertFreeCertificateContext
CertFindCertificateInStore
BCryptGenRandom
RtlCaptureStackBackTrace
RtlPcToFileHeader
LCMapStringEx
FormatMessageW
CloseHandle
K32GetModuleInformation
RegisterTraceGuidsW
GetTraceEnableLevel
TraceEvent
UnregisterTraceGuids
GetTraceLoggerHandle
CloseThreadpoolIo
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolThreadMaximum
CloseThreadpool
CancelThreadpoolIo
StartThreadpoolIo
CreateThreadpoolWork
CreateThreadpoolIo
TrySubmitThreadpoolCallback
SubmitThreadpoolWork
CloseThreadpoolWork
LocalSize
VmbusPipeServerOfferChannelEx
VmbusPipeServerConnectPipe
wcsnlen
strcmp
strncmp
_unlock_locales
_lock_locales
PerfSetCounterSetInfo
PerfStartProvider
PerfSetCounterRefValue
PerfDeleteInstance
PerfStopProvider
PerfCreateInstance
SysFreeString
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
CompareStringEx
GetProcessHeap
HeapAlloc
HeapFree
WriteFile
ReadFile
CancelIoEx
DecodePointer
EncodePointer
ExpandEnvironmentStringsW
SetFileCompletionNotificationModes
WTGetSignatureInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ