DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1e06300f0e954902e516f30cbb2bad10.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1e06300f0e954902e516f30cbb2bad10.dll
Resource
win10v2004-20231023-en
Target
NEAS.1e06300f0e954902e516f30cbb2bad10.exe
Size
137KB
MD5
1e06300f0e954902e516f30cbb2bad10
SHA1
aedb7e9c5d7997b0661db069efcffdb0dbdb0fa9
SHA256
9f8b80f8b454e69d81813c113e89a86e817d00ed4b87e0ea2d01424f7f0807ac
SHA512
b18ce1f01512e5ff3e36653630c1aaffa328a3595b24a32f86ab42fa00356ec9c25a9369abd97045bc3cb07ae7f770fa7466d3956f3ee4cdda1b3b2f2da55161
SSDEEP
3072:m48cVitdYZS6c1/qjzQMsI5ddvE1oVmf8TnBi54g7n:NWqjzPsMdVE1ImfgBmr
Checks for missing Authenticode signature.
resource |
---|
NEAS.1e06300f0e954902e516f30cbb2bad10.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteUrlCacheEntryW
lstrlenW
GetProcAddress
GetModuleHandleW
lstrcmpiW
GetLastError
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLi6raryExW
GetVersion
GetSystemTime
CloseHandle
FreeLibrary
GetTempFileNameW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
EnterCriticalSection
LeaveCriticalSection
LockResource
FindResourceExW
GetThreadLocale
SetThreadLocale
CreateFileA
GetPrivateProfileStringW
GetModuleFileNameW
DeleteCriticalSection
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetTempPathW
ExitThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
CreateThread
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CreateFileW
CharNextW
MessageBoxW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
ShellExecuteExW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysFreeString
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ