GetGrapholicPluginInfo
GetPicture
IsSupported
Static task
static1
Behavioral task
behavioral1
Sample
525a3fda62b344032ac07d0b11beb3d0_NEAS.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
525a3fda62b344032ac07d0b11beb3d0_NEAS.dll
Resource
win10v2004-20240419-en
Target
525a3fda62b344032ac07d0b11beb3d0_NEAS
Size
40KB
MD5
525a3fda62b344032ac07d0b11beb3d0
SHA1
53dbcb13773f4c1734d07c677133e9f52ca1aa1c
SHA256
43bd0101caae0c791e464687c890372821ba30f26037e5993dea9922afc19de1
SHA512
2c9845ce1d3a7ddf92d2a473cdd15f66370f2b488a11ace0452f985a1aec25e1fdc7d1e18ef8e93e7723d262ef4868da829d2582dcdbb1ce48470a043689dd6d
SSDEEP
768:KSLsNKv17k4PlyF6THONIGjT8CDKYqFJopE4t:KSzfPMF6THONIRCDuoOg
Checks for missing Authenticode signature.
resource |
---|
525a3fda62b344032ac07d0b11beb3d0_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStartupInfoA
HeapAlloc
GetProcessHeap
HeapReAlloc
FreeEnvironmentStringsA
GetModuleFileNameA
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
SetFilePointer
UnmapViewOfFile
ReadFile
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
HeapFree
DeleteCriticalSection
LCMapStringA
LCMapStringW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LoadStringA
GetGrapholicPluginInfo
GetPicture
IsSupported
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.