RPCSCheckAPIVer
RPCSDisable
RPCSEnable
RPCSGetCaps
RPCSGetDevmode
RPCSGetStatus
RPCSSetStatus
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ffac38d5dceb636c554beceae1a58a40.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ffac38d5dceb636c554beceae1a58a40.dll
Resource
win10v2004-20230915-en
Target
NEAS.ffac38d5dceb636c554beceae1a58a40.exe
Size
60KB
MD5
ffac38d5dceb636c554beceae1a58a40
SHA1
ef7fbc7eb354f3b97016e35452170bada890c462
SHA256
b08fa35746ce963c672741cb21d5f253034f631c023b6c212f7ae89453046989
SHA512
3de3af80a5bb2e8979f15beb73d5f9b99141b5e8d9a85195f951589f3e8ad62bc554afe7dd7a08d55fab6af33ecea1de3d29ed44626e742caa92d49e0b50b3b5
SSDEEP
768:OtwOcqos77nolrZ9Tz42An+drwOrpQL8qdNcRct8oC7pcbC:fzs77cZ9Tz4P+ULL2RloxC
Checks for missing Authenticode signature.
resource |
---|
NEAS.ffac38d5dceb636c554beceae1a58a40.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetEnvironmentStrings
FreeLibrary
EnterCriticalSection
GetProcAddress
LoadLibraryA
lstrcpynA
GlobalAlloc
GlobalFree
WideCharToMultiByte
GetACP
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LeaveCriticalSection
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
RPCSCheckAPIVer
RPCSDisable
RPCSEnable
RPCSGetCaps
RPCSGetDevmode
RPCSGetStatus
RPCSSetStatus
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ