DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4f1b658bec943c39c90d5b5ce05aff00.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4f1b658bec943c39c90d5b5ce05aff00.dll
Resource
win10v2004-20230915-en
Target
NEAS.4f1b658bec943c39c90d5b5ce05aff00.exe
Size
120KB
MD5
4f1b658bec943c39c90d5b5ce05aff00
SHA1
d5a2490aa8bb8c99186cf336dd306f6a426c36d4
SHA256
2199036750f842dcb3e8c269e185911ffea676d9d7bc8665073d5e28c8f6d9a9
SHA512
13c192838bd562568fdd9ea3f2778a977281ab70b37738dfdba3bea837412e1affa97edc6de1230ce04e085ea0eac173313234784d0b8b595c96d86eb8c1370e
SSDEEP
1536:+Vq0QBiiT9uCS2TWCZ1R7Nu+RMV+0jcfNIFDIMChr:U2iisCSd7+RMV+0jcfNmCl
Checks for missing Authenticode signature.
resource |
---|
NEAS.4f1b658bec943c39c90d5b5ce05aff00.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE