ByteToText
EventNumber
ExchGetID
ExchGetOrganization
ExchGetPath
ExchGetSite
ExtractString
UFEndJob
UFErrorRecovery
UFGetFunctionDefStrings
UFGetFunctionExamples
UFGetFunctionTemplates
UFGetVersion
UFInitialize
UFStartJob
UFTerminate
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.090dd1ffb9434e1519696c3d1dab6a60_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.090dd1ffb9434e1519696c3d1dab6a60_JC.dll
Resource
win10v2004-20230915-en
Target
NEAS.090dd1ffb9434e1519696c3d1dab6a60_JC.exe
Size
36KB
MD5
090dd1ffb9434e1519696c3d1dab6a60
SHA1
beedaf73b77aa3ae722179162fa2645a33e0e6f1
SHA256
25f584c0b8256a1972b5079dc8c02d244d5dc99274c3c800bc856a4d3b0fe9d1
SHA512
514c85d7b9a8f927528649e3c35c06ae95aae824bdfbb65f9d1f160469d0b960cb0f7f3c5e589420d5b715c10412cb297e6d50068aaa98554c82b0beb28d8d83
SSDEEP
768:SI2wnqP3vjFVw8KxFl2cgE56Mc90uL2pqEDQ5Q6nIZdnrkG2Q3:SI2AxFl2/E5Pc90uLstDDbnrkG2
Checks for missing Authenticode signature.
resource |
---|
NEAS.090dd1ffb9434e1519696c3d1dab6a60_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
lstrcpynA
lstrlenA
GetCurrentThreadId
TlsSetValue
GetModuleHandleA
WideCharToMultiByte
GetEnvironmentStrings
GetCommandLineA
GetVersion
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualFree
lstrcpyA
GetLastError
GetOEMCP
MultiByteToWideChar
TlsAlloc
TlsFree
TlsGetValue
GetModuleFileNameA
GetACP
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
wsprintfA
CharUpperBuffA
LoadStringA
ByteToText
EventNumber
ExchGetID
ExchGetOrganization
ExchGetPath
ExchGetSite
ExtractString
UFEndJob
UFErrorRecovery
UFGetFunctionDefStrings
UFGetFunctionExamples
UFGetFunctionTemplates
UFGetVersion
UFInitialize
UFStartJob
UFTerminate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ