GetGrapholicPluginInfo
GetPicture
IsSupported
Static task
static1
Behavioral task
behavioral1
Sample
34598c2e1db68345b2f5753633b9b910_NEAS.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
34598c2e1db68345b2f5753633b9b910_NEAS.dll
Resource
win10v2004-20240419-en
Target
34598c2e1db68345b2f5753633b9b910_NEAS
Size
40KB
MD5
34598c2e1db68345b2f5753633b9b910
SHA1
126edebd47be7c78cc92e365d3f53644e672c20a
SHA256
9328481f39347f736be32b3a4feae38172d96a5960f612f973218d5aead3a45a
SHA512
a95d50d4613acd1f64688219b9a5e8146d59808be14499ccd2c8a267bdb99bd9b4e416dc926c3481c0eeb39c054ed5d604cdcbf663907d22f4a6f6930797c230
SSDEEP
768:So42xK18udumPUTHbZP1kqFJoCt3IH9BIr:SoJ78UTHlPNoCmAr
Checks for missing Authenticode signature.
resource |
---|
34598c2e1db68345b2f5753633b9b910_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStartupInfoA
HeapAlloc
GetProcessHeap
HeapReAlloc
FreeEnvironmentStringsA
GetModuleFileNameA
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
SetFilePointer
UnmapViewOfFile
ReadFile
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
HeapFree
DeleteCriticalSection
LCMapStringA
LCMapStringW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LoadStringA
GetGrapholicPluginInfo
GetPicture
IsSupported
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ