DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.80bc6b3e563ea531c44d8589a1a22ac0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.80bc6b3e563ea531c44d8589a1a22ac0.dll
Resource
win10v2004-20230915-en
Target
NEAS.80bc6b3e563ea531c44d8589a1a22ac0.exe
Size
177KB
MD5
80bc6b3e563ea531c44d8589a1a22ac0
SHA1
8d895ebb3d01e7b2a6146a0dda95355d79f00330
SHA256
1f840841440711b36abfea1b4afb5b3c619d0c072189def893d33414fe12c9c2
SHA512
c907fccae0677c6b11241c84d3bb8e38e60b1a65e967faf78e7527a71043750fe678b20fcc13497b67bacfe6e61c626c38d9823f6bc7b068dc52ef19f517af36
SSDEEP
3072:FawjgFYeP/xWspt1GYYOM8TaWmAWtQ/5gN5ppOXgNc/HoTQMj4hkB:BgFYeXxNBYF8kto5gN5pp+gm/K4hW
Checks for missing Authenticode signature.
resource |
---|
NEAS.80bc6b3e563ea531c44d8589a1a22ac0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ