ExtractFiles
ExtractOneFile
GetGrapholicPluginInfo
IsSupported
WriteOneFile
Static task
static1
Behavioral task
behavioral1
Sample
6e6779d6101f45f1d043ed70b4c0e8f0_NEAS.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6e6779d6101f45f1d043ed70b4c0e8f0_NEAS.dll
Resource
win10v2004-20240419-en
Target
6e6779d6101f45f1d043ed70b4c0e8f0_NEAS
Size
40KB
MD5
6e6779d6101f45f1d043ed70b4c0e8f0
SHA1
3a9c0b306e7e823c3ca97328b57a5cbb84a370c5
SHA256
26bc495990aa1914c698037d036efc0da784e0dae09d4e5b089a38d402a85cb0
SHA512
f25e5d2875a41a7a35aca4ef1f4b1b8583364c426626aedaa4557b764834df4cc78c2c2a2bd6740d50ed6b3dffeecff5cf4ef9a06eb942021f9030e2f822904a
SSDEEP
768:EgsWyvtgln/zOGgZ1GzqTIj+ryb46398NIoe:EzW7/zOGsIzqTIyWpNXoe
Checks for missing Authenticode signature.
resource |
---|
6e6779d6101f45f1d043ed70b4c0e8f0_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GetProcessHeap
HeapAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
SetFilePointer
UnmapViewOfFile
ReadFile
WriteFile
GetCommandLineA
GetVersion
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapFree
VirtualAlloc
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
IsBadCodePtr
LoadStringA
wsprintfA
ExtractFiles
ExtractOneFile
GetGrapholicPluginInfo
IsSupported
WriteOneFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ