AVObjectCreate
AVObjectFree
Behavioral task
behavioral1
Sample
NEAS.5df6331127e6acae7effa153dbfdea00.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5df6331127e6acae7effa153dbfdea00.dll
Resource
win10v2004-20230915-en
Target
NEAS.5df6331127e6acae7effa153dbfdea00.exe
Size
27KB
MD5
5df6331127e6acae7effa153dbfdea00
SHA1
acbfbf80a766eca5fd71e8704f2140f3e1803518
SHA256
0e10b407e7f993f24db2df00330b8dddb6a4c55c8d84d04d3826782b5504dc97
SHA512
8df3b655cac90cb058a55404db94a8ef7787a820da63c32f1abc40467823dd855bc02b972edc2180ec9a5a10754908c4f7040bdd64c1e647b2971500b9d28555
SSDEEP
768:S0q5LRh+Y20Rb/T8pCJVbtPCKwza8Lusnd:tq5Fci0QqKwzR7d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.5df6331127e6acae7effa153dbfdea00.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AVObjectCreate
AVObjectFree
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ