GetPicture
GetPictureInfo
GetPluginInfo
GetPreview
IsSupported
Static task
static1
Behavioral task
behavioral1
Sample
638d5cb4c2bb0ed69f58b248687162d0_NEAS.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
638d5cb4c2bb0ed69f58b248687162d0_NEAS.dll
Resource
win10v2004-20240419-en
Target
638d5cb4c2bb0ed69f58b248687162d0_NEAS
Size
24KB
MD5
638d5cb4c2bb0ed69f58b248687162d0
SHA1
22ba602af8a6169001230dac508781172b657c3a
SHA256
80b9f65ea6c812c29b514f781e17b733d48ca903dcd5c3e27059a9c432ef2e34
SHA512
10136a1ce3e01e0ea575af3b722aa269a89e018cb0d3719f9169f36323162d12c3b283d7fa143935b5cb8e7bc9ee7be112db14b7b0b0667e238623460ba02d8b
SSDEEP
384:okEjN9wp4v7eiltIX40OLmBThK4nHpUQAQ0L6iHcsQBuav:oL9wp4ScM409hK4nJcn7
Checks for missing Authenticode signature.
resource |
---|
638d5cb4c2bb0ed69f58b248687162d0_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapCreate
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CloseHandle
SetFilePointer
GetFileSize
CreateFileA
GetStartupInfoA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
ReadFile
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
WriteFile
WideCharToMultiByte
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
wsprintfA
GetPicture
GetPictureInfo
GetPluginInfo
GetPreview
IsSupported
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ