DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.002700674560917784524b9326cc8330_JC.dll
Resource
win7-20231020-en
Target
NEAS.002700674560917784524b9326cc8330_JC.exe
Size
204KB
MD5
002700674560917784524b9326cc8330
SHA1
81e5798d6850d78fee36261945e2d284128547bd
SHA256
d45fba2921d0be6461e1e37f00f77d15436caa0b390dd04de0e4ec57ff7fdc17
SHA512
4f5d8aafe6cefc4f948a04840988c2c6856aef8c5955d6213afc9ea14f49d6754cc68471bb68bd16402862355a667f0b911f8201cacb0d20aa02abea8d6979e2
SSDEEP
1536:snhCc/p2A6JOzD+GNps1kY1E9qcaoBUkyY9p07g5rUVLVIqRLon:sUc/RN+9caoBUkyYkSyLVRLC
Checks for missing Authenticode signature.
resource |
---|
NEAS.002700674560917784524b9326cc8330_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
GetLocalTime
Sleep
ReadFile
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
OutputDebugStringA
IsBadReadPtr
GetTickCount
Module32NextW
MultiByteToWideChar
GetCurrentProcessId
GetModuleHandleA
SizeofResource
GetCurrentProcess
DebugBreak
SetErrorMode
OpenEventA
ExitProcess
LoadLibraryA
ReadProcessMemory
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
GetCPInfoExW
lstrlenA
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
DisableThreadLibraryCalls
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
GetACP
Module32FirstW
CharLowerW
GetCursor
CharNextW
wsprintfW
wsprintfA
SetWindowLongW
MessageBoxW
GetBkMode
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExA
CoTaskMemRealloc
CoCreateInstance
CoInitialize
OleRun
CoTaskMemAlloc
CoTaskMemFree
VariantInit
VariantClear
SysAllocStringLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
GetErrorInfo
wcsncpy
_stricmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
strrchr
abort
wcsncmp
time
srand
atoi
wcscpy
_strlwr
strncpy
strchr
strcmp
strstr
sprintf
_wcslwr
wcsstr
wcslen
_wcsicmp
memset
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
realloc
memcpy
memcmp
strlen
strcat
strcpy
InternetReadFile
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ