AVObjectCreate
AVObjectFree
Behavioral task
behavioral1
Sample
NEAS.16d5f89df3d12c8a1eb9d7f430b8e7a0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.16d5f89df3d12c8a1eb9d7f430b8e7a0.dll
Resource
win10v2004-20230915-en
Target
NEAS.16d5f89df3d12c8a1eb9d7f430b8e7a0.exe
Size
24KB
MD5
16d5f89df3d12c8a1eb9d7f430b8e7a0
SHA1
0002c92962deea7946e75a0ce215042020564084
SHA256
59ee2e5606b9368d309a169b641084e8715c08c063392e7498d3c32a4f65e75a
SHA512
b66f4de2b0ce99c57d1d11f31a267979d1a8288a6d5ab7607b31f06f424f686d6ac4222e9cef73c2bf3efbee24c8401f7f596882992a422bdc1200f8c97e9cbd
SSDEEP
768:OEVIkqJZl8VU1K6f3EJiPvLewknfb6S5e0dUxHzV7JCrha:OSml8O1K0vNOfb/UIkHzV7Iha
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.16d5f89df3d12c8a1eb9d7f430b8e7a0.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AVObjectCreate
AVObjectFree
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ