DWSensSchedule
SetupDWSensMain
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.abbb4b5a3f0b7265043f3d21849e4a60.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.abbb4b5a3f0b7265043f3d21849e4a60.dll
Resource
win10v2004-20231023-en
Target
NEAS.abbb4b5a3f0b7265043f3d21849e4a60.exe
Size
491KB
MD5
abbb4b5a3f0b7265043f3d21849e4a60
SHA1
dc9600aab006d9e9dd8308b8d33c700c35298bda
SHA256
b6833d6bec6f41301b3c3010b45db1067b1ff871ae0ebc599627a58e7716e755
SHA512
38cd72ad282ad883a3c55c8872ea7b8ccab08a4acaecc1dc6536a67c7a16114d848c2be661d6125123ff29c66f0618cb5bd7851662de9fb1c1b8b6da0f3414df
SSDEEP
12288:IpbgM2FJyrKN5avDFEUModJ01KRgsRj3Y+1q3M+tfHr:SgM2eryarbv+KRgclg7fHr
Checks for missing Authenticode signature.
resource |
---|
NEAS.abbb4b5a3f0b7265043f3d21849e4a60.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
lstrlenW
lstrlenA
GetLastError
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
ord32
ord51
ord8
ord116
ord74
ord160
ord159
ord73
ord124
ord49
ord17
ord121
ord103
ord145
ord34
ord64
ord118
CoUninitialize
CoCreateInstance
CoInitializeEx
SysAllocString
SysFreeString
_vsnprintf
_XcptFilter
_onexit
__dllonexit
_except_handler3
_adjust_fdiv
malloc
_initterm
free
wcstol
wcsstr
_vsnwprintf
DWSensSchedule
SetupDWSensMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ