DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a7fb29d5deb8f50977629a3be0250490.dll
Resource
win7-20231020-en
Target
NEAS.a7fb29d5deb8f50977629a3be0250490.exe
Size
62KB
MD5
a7fb29d5deb8f50977629a3be0250490
SHA1
f06ace9303f977a9962cdb482dc7843a0ffda720
SHA256
8b8627bc10982fb647951af93068469a84d51857816125f7237fb4e3c7abcfe2
SHA512
140f3e813a1c0ab95941c6572b6197a7f0a1922adb8a3440d15778bc49d5af31efad881c9f5f4e660e760b11d70bc9065f34e63ada727dd64ad5524159fcb5e1
SSDEEP
1536:fMGJxDEMHFyT/w8ALrTQ0a5Sa//Cylrri+oecvIVwB:f/bDLHFyJYGIanCylre+oecvbB
Checks for missing Authenticode signature.
resource |
---|
NEAS.a7fb29d5deb8f50977629a3be0250490.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
UnmapViewOfFile
InterlockedDecrement
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
FreeLibrary
SizeofResource
GetLastError
CreateFileMappingA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetTickCount
TlsGetValue
GetCurrentThreadId
OutputDebugStringW
MapViewOfFile
CloseHandle
TlsAlloc
TlsSetValue
GetModuleFileNameA
lstrlenA
FindResourceA
LoadResource
lstrcmpiA
HeapCreate
VirtualFree
GetVersionExA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
TlsFree
IsBadWritePtr
GetCPInfo
VirtualAlloc
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
SetLastError
GetEnvironmentVariableA
GetOEMCP
GetACP
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetClassNameA
CharNextA
IsWindow
GetKeyState
EnumWindows
GetWindowLongA
IsIconic
GetWindowRect
GetDesktopWindow
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
SysFreeString
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ