Sock
Winsock
hax
ini_processo
processo_info
wsaData
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1c03cd5ff39e3d52f85db551f1eab4b0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1c03cd5ff39e3d52f85db551f1eab4b0.dll
Resource
win10v2004-20230915-en
Target
NEAS.1c03cd5ff39e3d52f85db551f1eab4b0.exe
Size
77KB
MD5
1c03cd5ff39e3d52f85db551f1eab4b0
SHA1
13b542440fca359b1acba3c1714d5afccabbcf28
SHA256
7df1502c49d7388e52fc8f54d1baad4906a07c5718f21369603569726c6a763e
SHA512
101b12deda1591f1e650f651340fdcc0dd1503b609d692404672979de0c040158e05818c688ec78224945b4cd462fc1fc85058a82c7a8616276ac0b44c50edc8
SSDEEP
768:Yt0F8C6L00VVQiARQnh36RLDoLIWtkyABJOVdL2Dx8yhQ1Q1oF:Y+FPd3Wnh36RLcIW6yABJOPLiRuF
Checks for missing Authenticode signature.
resource |
---|
NEAS.1c03cd5ff39e3d52f85db551f1eab4b0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
memset
realloc
strlen
strncmp
vfprintf
WSAConnect
WSASocketA
WSAStartup
htons
inet_addr
Sock
Winsock
hax
ini_processo
processo_info
wsaData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ