IGCS_EndScreenshotSession
IGCS_MoveCameraMultishot
IGCS_MoveCameraPanorama
IGCS_StartScreenshotSession
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e9b2281825beaf3fa33f029ba5d767f0_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e9b2281825beaf3fa33f029ba5d767f0_JC.dll
Resource
win10v2004-20231023-en
Target
NEAS.e9b2281825beaf3fa33f029ba5d767f0_JC.exe
Size
2.3MB
MD5
e9b2281825beaf3fa33f029ba5d767f0
SHA1
7b2407644cb2afc17adca5a6c00c266424e2dfb3
SHA256
1ceaf36d6b704edacce7f582411ca49a6def92a9131b25decf3ebdfc5b9a98bf
SHA512
9cf5e4afa9e5aeb73ccc04c386f587831a1bf7a7aaad2096e4d9907fbba443b44a2f511dc82010fc7395d283f3673c97814125ee33d85dfed5c2cd119e7c73ce
SSDEEP
24576:2+C6FK6o8obYtqYHT9AR8HHUk68OxrH2VP09Xjankqln87i:4kzlo0hHT9ARYUk68cukUn87
Checks for missing Authenticode signature.
resource |
---|
NEAS.e9b2281825beaf3fa33f029ba5d767f0_JC.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
XInputGetState
XInputSetState
XInputGetCapabilities
WideCharToMultiByte
GlobalUnlock
GlobalAlloc
GlobalFree
CreateEventW
WaitForSingleObject
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryA
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
K32EnumProcessModules
K32GetModuleInformation
K32GetModuleBaseNameA
AllocConsole
AttachConsole
SetConsoleTextAttribute
GetStdHandle
FreeConsole
SetThreadPriority
FreeLibraryAndExitThread
DisableThreadLibraryCalls
CreateThread
Sleep
CreateFileW
DisconnectNamedPipe
WriteFile
CreateNamedPipeW
ConnectNamedPipe
ReadFile
CreateWaitableTimerW
SetWaitableTimer
LocalFree
GetModuleFileNameA
K32EnumProcessModulesEx
FlushInstructionCache
GetModuleFileNameW
FormatMessageA
WriteProcessMemory
UnhandledExceptionFilter
GlobalLock
OutputDebugStringW
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetConsoleCtrlHandler
GetTimeZoneInformation
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetCurrentThread
ExitProcess
GetModuleHandleExW
ExitThread
RtlUnwind
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
MultiByteToWideChar
GetProcAddress
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RtlLookupFunctionEntry
RtlCaptureContext
TlsGetValue
GetLastError
GetCurrentProcessId
RtlVirtualUnwind
OpenProcess
SetUnhandledExceptionFilter
InitializeSRWLock
TlsAlloc
SetLastError
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
InitializeSListHead
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
ReleaseSRWLockShared
AcquireSRWLockShared
TryAcquireSRWLockShared
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
GetTempPathW
AreFileApisANSI
DeviceIoControl
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
EncodePointer
DecodePointer
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
CompareStringEx
GetCPInfo
SetEvent
ResetEvent
GetStartupInfoW
LoadCursorW
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetCursor
RegisterClassExA
ClientToScreen
GetAsyncKeyState
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
GetWindow
IsWindowVisible
IsWindow
SetWindowLongPtrW
CallWindowProcW
GetWindowRect
GetRawInputData
RegisterRawInputDevices
ClipCursor
DestroyWindow
CloseWindow
CreateWindowExA
SetCursorPos
MonitorFromWindow
ReleaseDC
GetDC
SetProcessDPIAware
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetClientRect
ScreenToClient
GetCursorPos
IsChild
GetForegroundWindow
SetClipboardData
GetDeviceCaps
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetErrorInfo
VariantClear
SysFreeString
VariantInit
VariantChangeType
SetErrorInfo
CreateErrorInfo
SysAllocString
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
D3DCompile
CreateDXGIFactory2
ord101
D3D12SerializeRootSignature
D3D11CreateDeviceAndSwapChain
IGCS_EndScreenshotSession
IGCS_MoveCameraMultishot
IGCS_MoveCameraPanorama
IGCS_StartScreenshotSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ