Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.40bafe6b747c766f30b0a1a048867b20.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.40bafe6b747c766f30b0a1a048867b20.dll
Resource
win10v2004-20231020-en
Target
NEAS.40bafe6b747c766f30b0a1a048867b20.exe
Size
1.1MB
MD5
40bafe6b747c766f30b0a1a048867b20
SHA1
b495b2789ce90bd898f22158a7590768e677e10c
SHA256
36c3b55d7a606fa3fb3c17859580fed445112f7ce5266f5729f0b0dd0af669c4
SHA512
7152a544242c658289737bd275aeb31ab571a9065cb945fca165827f519ff99db0f5737cc079879987b750421c7390d98b0838f5b61f67513d7ea2de361e0e57
SSDEEP
24576:BmQVoAJSStjtheOHuJ1U7sxWpMY8CSgrV7MTjEdIVLQfwy6gYqdR/:B/x5BHuYZ80ZMTjEdCLby6gYqd9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
CryptDecodeObject
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CryptMsgClose
MapViewOfFile
MoveFileExW
ReadFile
WaitForSingleObject
Sleep
GetLastError
GetFileSize
DeleteFileW
GetCurrentProcessId
WaitForMultipleObjects
GetModuleFileNameW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetCurrentProcess
WriteFile
LocalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
HeapFree
OpenProcess
GetProcAddress
GetProcessHeap
GetModuleHandleW
CloseHandle
CreateMutexW
ReleaseMutex
GetVolumeInformationW
IsBadWritePtr
SetLastError
VirtualFree
GetFullPathNameW
lstrlenW
GetDiskFreeSpaceW
DeviceIoControl
VirtualAlloc
GetCompressedFileSizeW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
SetFilePointerEx
GetFileType
IsBadReadPtr
GetDriveTypeW
CreateTimerQueueTimer
DeleteTimerQueue
DeleteTimerQueueTimer
CreateTimerQueue
GetCurrentDirectoryW
LoadLibraryW
GetTickCount
DisableThreadLibraryCalls
CreateFileMappingW
UnmapViewOfFile
CreateFileW
GetFileSizeEx
QueryDosDeviceW
LoadLibraryA
GetModuleHandleA
GetModuleHandleExW
FreeLibrary
CreateEventW
SetEvent
ResetEvent
HeapAlloc
ExpandEnvironmentStringsW
GetWindowsDirectoryW
MoveFileW
InterlockedExchangeAdd
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GlobalMemoryStatusEx
FormatMessageW
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetSystemDirectoryW
GetFileAttributesW
GetTempPathW
CreateDirectoryW
FindClose
FindNextFileW
SetFileAttributesW
GetCurrentThreadId
LoadLibraryExW
TerminateProcess
ResumeThread
GetFileTime
SetEndOfFile
SetFilePointer
SetFileTime
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
SearchPathW
GetACP
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExW
LockResource
GetSystemInfo
LoadResource
FindResourceW
lstrcmpiW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
LookupPrivilegeValueW
AdjustTokenPrivileges
LookupPrivilegeNameW
GetTokenInformation
RegCloseKey
OpenProcessToken
RegOpenKeyW
RegQueryValueExW
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
GetDeviceDriverFileNameW
EnumDeviceDrivers
StrCmpNIW
PathGetDriveNumberW
StrCmpIW
PathIsDirectoryW
PathMakePrettyW
PathFindFileNameW
StrDupW
PathIsNetworkPathW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathUnquoteSpacesW
_purecall
wcsrchr
wcschr
memchr
__std_exception_destroy
__std_exception_copy
strstr
memcpy
_except_handler4_common
_CxxThrowException
memset
__std_type_info_destroy_list
memmove
__CxxFrameHandler3
wcsstr
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_initterm_e
terminate
_beginthreadex
_errno
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_wcsicmp
isalnum
_wcsnicmp
wcsncpy
strpbrk
towupper
towlower
wcscpy_s
tolower
toupper
_stricmp
_mktime64
_localtime64
_time64
_callnewh
free
calloc
malloc
__stdio_common_vsprintf_s
__stdio_common_vswprintf
ftell
__stdio_common_vsprintf
_wfopen_s
__stdio_common_vswscanf
fclose
fseek
rewind
fwrite
fread
srand
rand
_splitpath_s
wcstoul
_wtoi
atoi
modf
_dtest
_except1
SHGetFolderPathW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ