Decyption
GenerateEntries
GetPluginName
ReadData
Static task
static1
Behavioral task
behavioral1
Sample
5d1ad56602192a92c3b50ef777af0810_NEAS.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d1ad56602192a92c3b50ef777af0810_NEAS.dll
Resource
win10v2004-20240226-en
Target
5d1ad56602192a92c3b50ef777af0810_NEAS
Size
453KB
MD5
5d1ad56602192a92c3b50ef777af0810
SHA1
8c90b78e6e0ef28375d0b7d5b3a1c7bdd737c52d
SHA256
2a420422eb120fb07477155644f4b247d6d79a2e8ff64feac3db45d2e18ea2cb
SHA512
d5656c546d85e9c998f73d5fb483edcb331010a469654e86daadcef3641954aafffe0c8072521092a92a1a80a641505177357e05f0421713143ac67d8f452496
SSDEEP
12288:dGxnKWzU9x/+snJtPVOO3ncT3ko1aEgm:EnCj22FVOGcT3keym
Checks for missing Authenticode signature.
resource |
---|
5d1ad56602192a92c3b50ef777af0810_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LoadStringW
MessageBoxA
CharNextW
CreateWindowExA
SetWindowLongA
MessageBoxA
MessageBoxW
LoadStringW
GetWindowLongW
FindWindowA
DestroyWindow
CharUpperW
CharNextW
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
Sleep
VirtualFree
VirtualAlloc
GetACP
GetSystemInfo
GetTickCount
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
Sleep
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
ReadFile
OpenFileMappingA
MapViewOfFile
LocalFree
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateFileMappingA
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
Decyption
GenerateEntries
GetPluginName
ReadData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ