Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.690791c47f9266bb4d551c28c5c743b0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.690791c47f9266bb4d551c28c5c743b0.dll
Resource
win10v2004-20231020-en
Target
NEAS.690791c47f9266bb4d551c28c5c743b0.exe
Size
814KB
MD5
690791c47f9266bb4d551c28c5c743b0
SHA1
8bdada3d2a5ffcc6e6226204999c524423124ef4
SHA256
7f3b08feeffe1a5ef0bc186da946b75147363593e84f17c3e5e85445384f15ac
SHA512
401abe29aa55eee7317234a9f58fc67bcb4cf351ea31cf9d24b47d969e7885566434b1a09d8c018d4f0ded4c14101373e76596b0895be5e13334ceb4e18edf2e
SSDEEP
12288:AkQj33MfEaHo0p6XxIpqolonbp1MRJBZcBpWP7OiZOSwfYp+D0mfITZLRx3h9n:AkQj2EEwhIpLob9p0704mfI1LR1h9n
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetFeature
HidD_SetFeature
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExW
GetSystemDefaultLangID
GetModuleHandleW
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedExchangeAdd
CreateThread
TerminateThread
GetExitCodeThread
InterlockedExchange
OpenMutexA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetHandleInformation
CreateFileA
ReadFile
WriteFile
CreateEventA
LocalFree
SetEvent
ResetEvent
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalMemoryStatus
GetPrivateProfileStringW
DeviceIoControl
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapSize
SetFilePointer
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetEnvironmentVariableA
ReleaseMutex
GetCurrentThreadId
CreateMutexA
WTSGetActiveConsoleSessionId
LocalAlloc
lstrcmpiA
GetFileAttributesW
Sleep
WaitForSingleObject
GetSystemWindowsDirectoryW
CreateProcessW
GetTickCount
OutputDebugStringW
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
VirtualQuery
GetLocalTime
OutputDebugStringA
CreateToolhelp32Snapshot
GetModuleHandleA
Process32Next
VirtualAlloc
GetProcAddress
GetStartupInfoA
OpenProcess
GetCommandLineA
VirtualFree
GetCurrentThread
Process32First
DisableThreadLibraryCalls
GetModuleFileNameA
SetLastError
lstrlenA
InterlockedCompareExchange
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
CloseHandle
ProcessIdToSessionId
GetLastError
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
InterlockedDecrement
InterlockedIncrement
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
RaiseException
HeapReAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitThread
IsWindowVisible
PostMessageA
GetActiveWindow
AllowSetForegroundWindow
FindWindowA
SetWindowLongA
GetWindowLongA
EndDialog
ShowWindow
SendMessageTimeoutA
GetForegroundWindow
WindowFromPoint
GetParent
GetThreadDesktop
GetWindowRect
EnumDesktopWindows
GetSystemMetrics
SetThreadDesktop
SwitchDesktop
DialogBoxIndirectParamA
MoveWindow
GetWindowThreadProcessId
GetCursorPos
CreateDesktopW
OpenInputDesktop
OpenDesktopW
CloseDesktop
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
LookupAccountSidA
CreateProcessAsUserW
DuplicateTokenEx
GetSidSubAuthority
GetSidSubAuthorityCount
EqualSid
AllocateAndInitializeSid
FreeSid
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CreateWellKnownSid
GetSecurityDescriptorSacl
SetSecurityInfo
OpenThreadToken
LookupPrivilegeValueW
PrivilegeCheck
GetLengthSid
RegQueryValueExW
InitializeSecurityDescriptor
SetTokenInformation
SHGetSpecialFolderPathW
CertCreateCertificateContext
CertOpenStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertCloseStore
CertSetCertificateContextProperty
CallNtPowerInformation
DestroyEnvironmentBlock
CreateEnvironmentBlock
WTSQueryUserToken
WTSQuerySessionInformationA
WTSFreeMemory
RpcStringFreeA
UuidToStringA
UuidCreate
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
CM_Get_Parent
CM_Get_Device_IDA
CM_Get_DevNode_Registry_PropertyA
SCardStatusA
SCardControl
SCardGetAttrib
SCardEndTransaction
SCardBeginTransaction
SCardReconnect
SCardDisconnect
SCardConnectA
SCardEstablishContext
SCardListReadersA
SCardReleaseContext
SCardTransmit
CPAcquireContext
CPCreateHash
CPDecrypt
CPDeriveKey
CPDestroyHash
CPDestroyKey
CPEncrypt
CPExportKey
CPGenKey
CPGenRandom
CPGetHashParam
CPGetKeyParam
CPGetProvParam
CPGetUserKey
CPHashData
CPHashSessionKey
CPImportKey
CPReleaseContext
CPSetHashParam
CPSetKeyParam
CPSetProvParam
CPSignHash
CPVerifySignature
C_CancelFunction
C_CloseAllSessions
C_CloseSession
C_CopyObject
C_CreateObject
C_Decrypt
C_DecryptDigestUpdate
C_DecryptFinal
C_DecryptInit
C_DecryptUpdate
C_DecryptVerifyUpdate
C_DeriveKey
C_DestroyObject
C_Digest
C_DigestEncryptUpdate
C_DigestFinal
C_DigestInit
C_DigestKey
C_DigestUpdate
C_Encrypt
C_EncryptFinal
C_EncryptInit
C_EncryptUpdate
C_Finalize
C_FindObjects
C_FindObjectsFinal
C_FindObjectsInit
C_GenerateKey
C_GenerateKeyPair
C_GenerateRandom
C_GetAttributeValue
C_GetFunctionList
C_GetFunctionStatus
C_GetInfo
C_GetMechanismInfo
C_GetMechanismList
C_GetObjectSize
C_GetOperationState
C_GetSessionInfo
C_GetSlotInfo
C_GetSlotList
C_GetTokenInfo
C_InitPIN
C_InitToken
C_Initialize
C_Login
C_Logout
C_OpenSession
C_SeedRandom
C_SetAttributeValue
C_SetOperationState
C_SetPIN
C_SetTokenInfo
C_Sign
C_SignEncryptUpdate
C_SignFinal
C_SignInit
C_SignRecover
C_SignRecoverInit
C_SignUpdate
C_UnwrapKey
C_Verify
C_VerifyFinal
C_VerifyInit
C_VerifyRecover
C_VerifyRecoverInit
C_VerifyUpdate
C_WaitForSlotEvent
C_WrapKey
SKF_AsyPrvKeyDecrypt
SKF_CancelWaitForDevEvent
SKF_ChangeDevAuthKey
SKF_ChangePIN
SKF_ClearSecureState
SKF_CloseApplication
SKF_CloseContainer
SKF_CloseHandle
SKF_ConnectDev
SKF_CreateApplication
SKF_CreateContainer
SKF_CreateFile
SKF_Decrypt
SKF_DecryptFinal
SKF_DecryptInit
SKF_DecryptUpdate
SKF_DeleteApplication
SKF_DeleteContainer
SKF_DeleteFile
SKF_DevAuth
SKF_Digest
SKF_DigestFinal
SKF_DigestInit
SKF_DigestUpdate
SKF_DisConnectDev
SKF_ECCDecrypt
SKF_ECCExportSessionKey
SKF_ECCSignData
SKF_ECCSignHash
SKF_ECCVerify
SKF_Encrypt
SKF_EncryptFinal
SKF_EncryptInit
SKF_EncryptUpdate
SKF_EnumApplication
SKF_EnumContainer
SKF_EnumDev
SKF_EnumFiles
SKF_Ex_ChangeDevAuthKey
SKF_Ex_ECCExportSessionKeyByHandle
SKF_Ex_FpEnum
SKF_Ex_FpGetInfo
SKF_Ex_FpRegister
SKF_Ex_FpUnregister
SKF_Ex_FpVerify
SKF_Ex_GenECCKeyPair
SKF_Ex_GenRSAKeyPair
SKF_Ex_GenerateKey
SKF_Ex_GetSessionKey
SKF_Ex_HasFingerprint
SKF_Ex_PrvKeyDecrypt
SKF_Ex_RSAExportSessionKeyByHandle
SKF_Ex_RSAPrvKeyDecrypt
SKF_ExportCertificate
SKF_ExportPublicKey
SKF_ExtECCDecrypt
SKF_ExtECCEncrypt
SKF_ExtECCSign
SKF_ExtECCVerify
SKF_ExtRSAPriKeyOperation
SKF_ExtRSAPubKeyOperation
SKF_GenECCKeyPair
SKF_GenExtRSAKey
SKF_GenRSAKeyPair
SKF_GenRandom
SKF_GenerateAgreementDataAndKeyWithECC
SKF_GenerateAgreementDataWithECC
SKF_GenerateKeyWithECC
SKF_GetContainerType
SKF_GetDevInfo
SKF_GetDevInfoP0
SKF_GetDevState
SKF_GetFileInfo
SKF_GetPINInfo
SKF_ImportCertificate
SKF_ImportECCKeyPair
SKF_ImportRSAKeyPair
SKF_ImportSessionKey
SKF_LockDev
SKF_Mac
SKF_MacFinal
SKF_MacInit
SKF_MacUpdate
SKF_OpenApplication
SKF_OpenContainer
SKF_PrvKeyDecrypt
SKF_RSADecrypt
SKF_RSAExportSessionKey
SKF_RSASignData
SKF_RSASignHash
SKF_RSAVerify
SKF_ReadFile
SKF_SetLabel
SKF_SetSymmKey
SKF_SignData
SKF_Transmit
SKF_UnblockPIN
SKF_UnlockDev
SKF_VerifyPIN
SKF_WaitForDevEvent
SKF_WriteFile
SlotGetFunction
SlotGetFunctionList
X_CPAcquireContext
X_CPCreateHash
X_CPDecrypt
X_CPDeriveKey
X_CPDestroyHash
X_CPDestroyKey
X_CPEncrypt
X_CPExportKey
X_CPGenKey
X_CPGenRandom
X_CPGetHashParam
X_CPGetKeyParam
X_CPGetProvParam
X_CPGetUserKey
X_CPHashData
X_CPHashSessionKey
X_CPImportKey
X_CPReleaseContext
X_CPSetHashParam
X_CPSetKeyParam
X_CPSetProvParam
X_CPSignHash
X_CPVerifySignature
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ