DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cb7ad316ea4dbbb2355b195e9f26b740_NEAS.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb7ad316ea4dbbb2355b195e9f26b740_NEAS.dll
Resource
win10v2004-20240419-en
Target
cb7ad316ea4dbbb2355b195e9f26b740_NEAS
Size
140KB
MD5
cb7ad316ea4dbbb2355b195e9f26b740
SHA1
0c77fcb50f8b3eca27b6fdab43c5c95dca56b4aa
SHA256
3fc72b10e9dfe64023b171e94e1a3bc4c4e607da8da58cc4ce3d36915e4db8d1
SHA512
c94102ca47d1311f5cc62ae10ddaf7fa937c8fb2c2bf806ce464de7200802575068fe77900bcb9005733c469abb8246ec26a0b318cd22cc770211825ec65c342
SSDEEP
3072:YuKNSDGx0oVIvJIMBjZ9t2c9INkJTOlGe+:nKbx7VIvJNBIpiB
Checks for missing Authenticode signature.
resource |
---|
cb7ad316ea4dbbb2355b195e9f26b740_NEAS |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryA
GetFileAttributesA
WaitForSingleObject
SetEvent
CreateEventA
CreateThread
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
CloseHandle
ReadFile
MultiByteToWideChar
CreateFileA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
HeapSize
TlsGetValue
GetFileSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
GetWindow
EnableWindow
SendMessageA
CharNextA
GetParent
DestroyWindow
RegisterClassA
CreateWindowExA
SetWindowLongA
GetActiveWindow
GetWindowLongA
KillTimer
SetTimer
UnregisterClassA
MessageBoxA
DefWindowProcA
MessageBoxExA
GetDlgItem
RegEnumKeyExA
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
PathFindExtensionA
CreatePropertySheetPageA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ