DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1a0a5eb66bde3f72aa27126696abbe90_JC.dll
Resource
win7-20231023-en
Target
NEAS.1a0a5eb66bde3f72aa27126696abbe90_JC.exe
Size
248KB
MD5
1a0a5eb66bde3f72aa27126696abbe90
SHA1
676e39bd799929088f80d665f578186b9177170f
SHA256
93902ff256dfbfafb9a738e321e7b6a1f23e874e63ccfc7daa7d76479cdc1ac6
SHA512
e72c839fcedd42314d3cc6b7344314cfa494d89a7a23cef8eaf22264eed681a015c6e31a29d42e251000f4507010b6d1b6ae3f47c5aab699671eea0c97d4bafe
SSDEEP
6144:/+cQTZKXJQEihmkYuCoX7UMSzCVaYhbyzTmmtS/PP:/+L9KXGEiRDCoXALTX2j
Checks for missing Authenticode signature.
resource |
---|
NEAS.1a0a5eb66bde3f72aa27126696abbe90_JC.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??1type_info@@UAE@XZ
__CxxFrameHandler3
_onexit
_CxxThrowException
bsearch
wcsncmp
wcsrchr
mbstowcs
free
memcpy
_ltow
realloc
malloc
memset
_wcsicmp
_lock
_purecall
_wtol
_XcptFilter
_initterm
_amsg_exit
_wcsnicmp
_except_handler4_common
_unlock
__dllonexit
GetCurrentProcess
HeapDestroy
FreeLibrary
VirtualQuery
GetVersion
GetProcAddress
LoadLibraryA
LeaveCriticalSection
GetCurrentThreadId
GetModuleFileNameW
DisableThreadLibraryCalls
GetModuleHandleW
lstrcmpiW
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
GetLastError
InterlockedDecrement
InterlockedIncrement
GetUserDefaultLCID
lstrlenW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
LoadLibraryExW
MessageBoxW
LoadStringW
GetActiveWindow
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
CreateStreamOnHGlobal
StgOpenStorage
CoCreateInstance
CoTaskMemFree
IIDFromString
CoTaskMemAlloc
StringFromCLSID
CoGetMalloc
GetErrorInfo
VariantClear
SysAllocString
VariantInit
VariantCopy
SysFreeString
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SysStringLen
CreateErrorInfo
SafeArrayDestroy
SysStringByteLen
SafeArrayCopy
SysAllocStringLen
SetErrorInfo
MPInitializeCriticalSection
MPDeleteCriticalSection
UMSEnterCSWraper
MpHeapFree
MpGetHeapHandle
MpHeapAlloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE