Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eaceb51dcb5a762b51c51fd067ab00b0.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.eaceb51dcb5a762b51c51fd067ab00b0.dll
Resource
win10v2004-20231023-en
Target
NEAS.eaceb51dcb5a762b51c51fd067ab00b0.exe
Size
352KB
MD5
eaceb51dcb5a762b51c51fd067ab00b0
SHA1
d394b62a6d9c9639ee55d9cda9aff0f7425559a0
SHA256
f3b310b0c257cc1230f24c44e95fe4c47cd44937c340ddf29cdb1c58269a4a7d
SHA512
84a0154185a72c9caaa03c31169009da5189f34a90688447958fcb470cc15714a4d670b1d7462f2a455997b51ffcd4a6290c176e2e484fe711e275add0c7afe8
SSDEEP
6144:GAU6EqBWooP2BzWQv56oqmOOfPOlzhBaODLmQAGGGBBV+UdvrEFp7hKeAV:GAFEqBWohv0oqllzhiWTBBjvrEH78
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetObjSockHlp
GetObjectLog
GetObjectSys
SetCheckAfterIfSuccess
GetCheckAfterIfSuccess
CreateObjectBootQuickCfg
GetVSSFixObject
GetObjectLang
CreateDdmManager
CreateProgObject
CreateObjectImgInfo
CreateObjectFlbImgFile
CreateGptBootQuickCfgObject
WTSQuerySessionInformationW
WTSFreeMemory
StrStrIW
GetObjOutlokkBack
GetLogicalDrives
Sleep
GetPrivateProfileIntW
GetVolumeInformationW
GetModuleFileNameW
CreateFileW
FreeLibrary
WaitForMultipleObjects
WideCharToMultiByte
IsBadWritePtr
LoadLibraryW
GetCurrentThread
GetProcAddress
CreateThread
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetCurrentProcess
GetVersionExW
WriteFile
GetLogicalDriveStringsW
GetWindowsDirectoryW
TerminateProcess
DeleteFileW
SetFileAttributesW
FlushFileBuffers
LocalFree
SetFilePointer
GetFileSizeEx
GetFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
LocalAlloc
GetFileAttributesW
GetDriveTypeW
GetLocalTime
GetTickCount
GetLastError
CloseHandle
InitializeCriticalSection
GetDiskFreeSpaceExW
RemoveDirectoryW
FindFirstFileW
FindClose
FindNextFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
CreateDirectoryA
DeleteCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
InterlockedExchange
WinExec
SetErrorMode
GetFileAttributesA
GetModuleFileNameA
ReadFile
PostQuitMessage
ExitWindowsEx
CharUpperW
RegCloseKey
SetThreadToken
OpenThreadToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
InitiateSystemShutdownW
SetNamedSecurityInfoW
SetFileSecurityW
GetAce
GetNamedSecurityInfoW
SetEntriesInAclW
GetAclInformation
FreeSid
RegOpenKeyExW
RegDeleteValueA
RegOpenKeyA
GetSecurityDescriptorLength
RegQueryValueExA
EqualSid
AllocateAndInitializeSid
LookupAccountNameW
SHGetFolderPathA
SHGetFolderPathW
CoInitializeSecurity
CoUninitialize
CoInitialize
CoCreateInstance
SysFreeString
SysAllocString
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
_except_handler4_common
__CxxFrameHandler3
memmove
??0exception@std@@QAE@ABV01@@Z
wcscmp
memcpy
swprintf_s
_invalid_parameter_noinfo
_wcsicmp
wcsstr
??2@YAPAXI@Z
memset
wcslen
wcscat_s
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
wcscpy_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
setlocale
wcscpy
strrchr
??_V@YAXPAX@Z
_vswprintf
srand
sprintf
strncat_s
strncpy_s
_purecall
_time64
iswalpha
_vswprintf_c_l
strlen
rand
wcsrchr
memcmp
_wmkdir
wcstombs
wcscat
memmove_s
free
calloc
printf
memcpy_s
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_CxxThrowException
__clean_type_info_names_internal
isalpha
tolower
isalnum
strchr
isspace
strncmp
_vsnprintf_s
fseek
fprintf
_fsopen
fread
ftell
ferror
strstr
fputc
fclose
strcpy_s
omp_destroy_lock
omp_get_num_procs
omp_init_lock
WSACleanup
gethostbyname
WSAStartup
inet_ntoa
strncpy
mbstowcs
ZwShutdownSystem
_wcsnicmp
wcsncpy
CreateEnumRemoteFolder
HexToStr
CreateEncryptObject
StrToHex
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CreateObjectFileBackup
CreateSetDACLPtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ