Hai
wuhen
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4c0eeab7d4b33858899914b03fe6e560.exe
Resource
win7-20230831-en
Target
NEAS.4c0eeab7d4b33858899914b03fe6e560.exe
Size
210KB
MD5
4c0eeab7d4b33858899914b03fe6e560
SHA1
ca73d52e191df14d449fbdd3f3e0cc6914816eed
SHA256
bfe43da98b5ec63eac6d9f097adb5cd8fce8fabc4586bfa8a75b8c24c6e37a6e
SHA512
106bf624ac47a600771cdcb9cf76afeaa385d35af9ab40b5537dd6fc2c029bdfae5513dc6faf38121ce4ee9cc1584b4ec7a6e6e443c09a771a92477314d3523f
SSDEEP
3072:MQhZkOLfuDg0PtOqzKONqsEykRLSDHowmLBLARnXaC9QtKNk44a0wCQzMVz:mOFStZzKqqsE6kLCRnXf9ae90wloV
Checks for missing Authenticode signature.
resource |
---|
NEAS.4c0eeab7d4b33858899914b03fe6e560.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetModuleHandleA
GetStartupInfoA
memset
realloc
free
??2@YAPAXI@Z
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
_stricmp
Hai
wuhen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE