MHook
MUnHook
Behavioral task
behavioral1
Sample
NEAS.550b12afa169c93eb98fe83d2bd49470.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.550b12afa169c93eb98fe83d2bd49470.dll
Resource
win10v2004-20230915-en
Target
NEAS.550b12afa169c93eb98fe83d2bd49470.exe
Size
5KB
MD5
550b12afa169c93eb98fe83d2bd49470
SHA1
cc27873858ec2bd4bad8c8f1c97dc514801fd04e
SHA256
2436cf70dfbc557e4f92e94af43f7aca61a3a6129144dd4d55f62156166eb848
SHA512
531b949f7bd7ffc6a8514f88ff8b75c565b04b719ebe0a1ab9c5a4665905112ec471c42a6127cf0605fa14723aa085beb008a4871a4afa1c47d8b030faecc14d
SSDEEP
48:OEPZkJid1NfW7wvovG8Z2QxVVL3ELDJhm9Rc+f3bQo9vaxx/r9m05gs+7SeJY8Jg:nPKJid67Q8p7J5f30Mv2Zhm2+CRh1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.550b12afa169c93eb98fe83d2bd49470.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
MHook
MUnHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ