DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8339cc3e557c2a00d392ef16eb3e09a0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8339cc3e557c2a00d392ef16eb3e09a0.dll
Resource
win10v2004-20231020-en
Target
NEAS.8339cc3e557c2a00d392ef16eb3e09a0.exe
Size
243KB
MD5
8339cc3e557c2a00d392ef16eb3e09a0
SHA1
f4a4656ac4bbbc8d08b73b732aed72224010ab74
SHA256
ce17b443d360a52708698a3d17657b46c222b09a3626fff39c9cb0f03ef26084
SHA512
d94dec64832f5ce05b5558996a8802a21b0592a48181b25b0bb948183dd8236e42f7779ff64f7f376c4787951c37ba49e0a367407c04f68606f58147873a86c8
SSDEEP
3072:8C6g3Yyr8RlUl0FHQQLBYYdBUMKzvRbSJor+MDHhYCmoPQihpuuXIcXBJb1coJ5D:+g3YF3TUy6bkihpuEb35CrK
Checks for missing Authenticode signature.
resource |
---|
NEAS.8339cc3e557c2a00d392ef16eb3e09a0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_allmul
_allrem
wcstombs
_alldiv
memset
_wcsicmp
ord1
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
free
malloc
time
srand
rand
_purecall
__CxxFrameHandler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
DisableThreadLibraryCalls
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CreateStreamOnHGlobal
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ