DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d94c9bb2b62513604b79056bff95f940.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d94c9bb2b62513604b79056bff95f940.dll
Resource
win10v2004-20231023-en
Target
NEAS.d94c9bb2b62513604b79056bff95f940.exe
Size
270KB
MD5
d94c9bb2b62513604b79056bff95f940
SHA1
23f865cb83d96af71e55ab6721001d9b0f1c083e
SHA256
fa942ba7696cb10e52dfc456dfa914e6c5e37e33f5794a79c7e7f3647cd92c0b
SHA512
55c1707969685a739022cd847920ba5b92155923a305aad43d691ef630c9ebe1cda49ee8ee35994197c3d3a840271692e1ec039c76265fc405d003127757f09b
SSDEEP
6144:AGuL0D8+su9cl3FgkbEj1XCS4cDIRLPe:AGu4Xe4jItgY
Checks for missing Authenticode signature.
resource |
---|
NEAS.d94c9bb2b62513604b79056bff95f940.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
malloc
__C_specific_handler
memset
isalpha
??0exception@@QEAA@AEBQEBDH@Z
_callnewh
_CxxThrowException
__CxxFrameHandler3
_XcptFilter
_amsg_exit
memmove
free
wcschr
_initterm
_lock
_unlock
__dllonexit
_onexit
??0exception@@QEAA@AEBV0@@Z
_wcsicmp
_purecall
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
memcpy_s
memcpy
memcmp
??1type_info@@UEAA@XZ
_vsnprintf
strcmp
ord4
ord3
ord1
ord7
GlobalUnlock
GlobalAlloc
GlobalFree
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RaiseException
GetProcessHeap
MulDiv
LocalAlloc
LocalFree
DisableThreadLibraryCalls
OutputDebugStringW
GetLastError
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceExW
WideCharToMultiByte
GetLocalTime
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GlobalLock
UnregisterClassA
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
SysAllocStringByteLen
VariantInit
SysFreeString
VariantClear
SysStringLen
SysAllocStringLen
VarBstrCmp
VarI4FromStr
SysAllocString
SysStringByteLen
RegisterTraceGuidsW
SetThreadToken
UnregisterTraceGuids
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RpcStringFreeA
UuidToStringA
GetJobW
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ