ClbAddData
FODLUMLH
ClbSetColumnWidths
OSPXVMKY
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.002eef4ea21344752332b619b7914940.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.002eef4ea21344752332b619b7914940.dll
Resource
win10v2004-20231023-en
Target
NEAS.002eef4ea21344752332b619b7914940.exe
Size
45KB
MD5
002eef4ea21344752332b619b7914940
SHA1
c80fe2893d25dc6b4235014ae04f3c8c65d970d6
SHA256
251603ef02b8554ce5ef0139130545f76fc3170ab653ec2df0fd10e0c6188344
SHA512
aa1047a7addbf3bbc9fd009ea61f2d7e531af72bb46f68d1d8256a71d96c7262c90b57330d124fe62e36b8d83651d3d7484147d8518fd125e85e0f4cbc6a4b17
SSDEEP
768:M9DYAvrrYFDdUVHmgOMtitTjxyNq5ewMwkjw5I9tG1ADjMl6t:MSAvrrGUC4WTQNqNfkjw2GVl
Checks for missing Authenticode signature.
resource |
---|
NEAS.002eef4ea21344752332b619b7914940.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ClbAddData
FODLUMLH
ClbSetColumnWidths
OSPXVMKY
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ