Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.13b527d5e359e30407efc069483c4aa0.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.13b527d5e359e30407efc069483c4aa0.dll
Resource
win10v2004-20231023-en
Target
NEAS.13b527d5e359e30407efc069483c4aa0.exe
Size
1.0MB
MD5
13b527d5e359e30407efc069483c4aa0
SHA1
2ed208c9f544c95b61f0e84ae16bb81e817b6489
SHA256
167d76a4cb3cec6fbfac71cd2d6fd02e95269883a1d2ead038c0a574b103c245
SHA512
116261d230bd8f11b715ae093c10465036b7404fef603fe9795640d673cb145d00ccd2de1d8f38b23c0f3c617f346fa0d217af6f84563d07ad76e59c9c1e9030
SSDEEP
12288:IAUQNL43okYsYB5uBpDRTCpCRE6ei3KmOsbBtO8wZOiyG8wkR44Te9SD48m3KUU6:FNL43okLYB5uBtfi/gbTRtidwo
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
gpg_err_code_from_errno
gpg_err_code_from_syserror
gpg_err_set_errno
gpg_strerror
gpg_strsource
gpgrt_lock_destroy
gpgrt_lock_init
gpgrt_lock_lock
gpgrt_lock_unlock
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
OpenFileMappingA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_fstat64
_initterm
_lock
_onexit
_snwprintf
_time64
_unlock
_vsnprintf
abort
atoi
calloc
clock
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fread
free
fwprintf
fwrite
getenv
iscntrl
isspace
isxdigit
malloc
memcmp
memcpy
memmove
memset
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strpbrk
strtoul
vfprintf
wcscpy
_write
_stricmp
_read
_open
_getpid
_close
_access
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
_gcry_mpi_get_const
gcry_calloc
gcry_calloc_secure
gcry_check_version
gcry_cipher_algo_info
gcry_cipher_algo_name
gcry_cipher_authenticate
gcry_cipher_checktag
gcry_cipher_close
gcry_cipher_ctl
gcry_cipher_decrypt
gcry_cipher_encrypt
gcry_cipher_get_algo_blklen
gcry_cipher_get_algo_keylen
gcry_cipher_gettag
gcry_cipher_info
gcry_cipher_map_name
gcry_cipher_mode_from_oid
gcry_cipher_open
gcry_cipher_setctr
gcry_cipher_setiv
gcry_cipher_setkey
gcry_control
gcry_create_nonce
gcry_ctx_release
gcry_err_code_from_errno
gcry_err_code_to_errno
gcry_err_make_from_errno
gcry_error_from_errno
gcry_free
gcry_is_secure
gcry_kdf_derive
gcry_log_debug
gcry_log_debughex
gcry_log_debugmpi
gcry_log_debugpnt
gcry_log_debugsxp
gcry_mac_algo_info
gcry_mac_algo_name
gcry_mac_close
gcry_mac_ctl
gcry_mac_get_algo
gcry_mac_get_algo_keylen
gcry_mac_get_algo_maclen
gcry_mac_map_name
gcry_mac_open
gcry_mac_read
gcry_mac_setiv
gcry_mac_setkey
gcry_mac_verify
gcry_mac_write
gcry_malloc
gcry_malloc_secure
gcry_md_algo_info
gcry_md_algo_name
gcry_md_close
gcry_md_copy
gcry_md_ctl
gcry_md_debug
gcry_md_enable
gcry_md_extract
gcry_md_get_algo
gcry_md_get_algo_dlen
gcry_md_hash_buffer
gcry_md_hash_buffers
gcry_md_info
gcry_md_is_enabled
gcry_md_is_secure
gcry_md_map_name
gcry_md_open
gcry_md_read
gcry_md_reset
gcry_md_setkey
gcry_md_write
gcry_mpi_abs
gcry_mpi_add
gcry_mpi_add_ui
gcry_mpi_addm
gcry_mpi_aprint
gcry_mpi_clear_bit
gcry_mpi_clear_flag
gcry_mpi_clear_highbit
gcry_mpi_cmp
gcry_mpi_cmp_ui
gcry_mpi_copy
gcry_mpi_div
gcry_mpi_dump
gcry_mpi_ec_add
gcry_mpi_ec_curve_point
gcry_mpi_ec_decode_point
gcry_mpi_ec_dup
gcry_mpi_ec_get_affine
gcry_mpi_ec_get_mpi
gcry_mpi_ec_get_point
gcry_mpi_ec_mul
gcry_mpi_ec_new
gcry_mpi_ec_set_mpi
gcry_mpi_ec_set_point
gcry_mpi_ec_sub
gcry_mpi_gcd
gcry_mpi_get_flag
gcry_mpi_get_nbits
gcry_mpi_get_opaque
gcry_mpi_invm
gcry_mpi_is_neg
gcry_mpi_lshift
gcry_mpi_mod
gcry_mpi_mul
gcry_mpi_mul_2exp
gcry_mpi_mul_ui
gcry_mpi_mulm
gcry_mpi_neg
gcry_mpi_new
gcry_mpi_point_get
gcry_mpi_point_new
gcry_mpi_point_release
gcry_mpi_point_set
gcry_mpi_point_snatch_get
gcry_mpi_point_snatch_set
gcry_mpi_powm
gcry_mpi_print
gcry_mpi_randomize
gcry_mpi_release
gcry_mpi_rshift
gcry_mpi_scan
gcry_mpi_set
gcry_mpi_set_bit
gcry_mpi_set_flag
gcry_mpi_set_highbit
gcry_mpi_set_opaque
gcry_mpi_set_opaque_copy
gcry_mpi_set_ui
gcry_mpi_snatch
gcry_mpi_snew
gcry_mpi_sub
gcry_mpi_sub_ui
gcry_mpi_subm
gcry_mpi_swap
gcry_mpi_test_bit
gcry_pk_algo_info
gcry_pk_algo_name
gcry_pk_ctl
gcry_pk_decrypt
gcry_pk_encrypt
gcry_pk_genkey
gcry_pk_get_curve
gcry_pk_get_keygrip
gcry_pk_get_nbits
gcry_pk_get_param
gcry_pk_map_name
gcry_pk_sign
gcry_pk_testkey
gcry_pk_verify
gcry_prime_check
gcry_prime_generate
gcry_prime_group_generator
gcry_prime_release_factors
gcry_pubkey_get_sexp
gcry_random_add_bytes
gcry_random_bytes
gcry_random_bytes_secure
gcry_randomize
gcry_realloc
gcry_set_allocation_handler
gcry_set_fatalerror_handler
gcry_set_gettext_handler
gcry_set_log_handler
gcry_set_outofcore_handler
gcry_set_progress_handler
gcry_sexp_alist
gcry_sexp_append
gcry_sexp_build
gcry_sexp_build_array
gcry_sexp_cadr
gcry_sexp_canon_len
gcry_sexp_car
gcry_sexp_cdr
gcry_sexp_cons
gcry_sexp_create
gcry_sexp_dump
gcry_sexp_extract_param
gcry_sexp_find_token
gcry_sexp_length
gcry_sexp_new
gcry_sexp_nth
gcry_sexp_nth_buffer
gcry_sexp_nth_data
gcry_sexp_nth_mpi
gcry_sexp_nth_string
gcry_sexp_prepend
gcry_sexp_release
gcry_sexp_sprint
gcry_sexp_sscan
gcry_sexp_vlist
gcry_strdup
gcry_strerror
gcry_strsource
gcry_xcalloc
gcry_xcalloc_secure
gcry_xmalloc
gcry_xmalloc_secure
gcry_xrealloc
gcry_xstrdup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ