_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
NEAS.0b6d9381a71c177191e2091cf95fb700_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0b6d9381a71c177191e2091cf95fb700_JC.dll
Resource
win10v2004-20230915-en
Target
NEAS.0b6d9381a71c177191e2091cf95fb700_JC.exe
Size
118KB
MD5
0b6d9381a71c177191e2091cf95fb700
SHA1
cfc516fb8e23b6859b11acb8d5ae187c7b9e7f84
SHA256
1eea46e7858d929912275133f421b430ce1903f88b05bc050037a3158b368e0f
SHA512
6cb48b84ca2d40b331f371977fdfe4d44ef006c65bad42dcfadfa3484187017fe9a881733906ecd92ef6fb497d06304ab8b758413163cea360f2e30827e7c8ee
SSDEEP
1536:LAeQ/Uvkeb2nA+fOsw1pDTNP6+sSPFeK4L4hBAt5nouy8FKmM:7ktM2nlOl1ZTV6+tBAtpoutAv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.0b6d9381a71c177191e2091cf95fb700_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE