LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5081ad6125016c23ae52bce16135cbd0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5081ad6125016c23ae52bce16135cbd0.exe
Resource
win10v2004-20230915-en
Target
NEAS.5081ad6125016c23ae52bce16135cbd0.exe
Size
798KB
MD5
5081ad6125016c23ae52bce16135cbd0
SHA1
c9cd1d3429fd7f36b539c1619b7842d8a0e297f7
SHA256
97472ad71cf9714e0123e7b0457e4fcfc41d71b92b07848853d7a7aa6529d2ba
SHA512
0c0a04e5fc4a599c5f94d630e7d03c53b162e12a91417c085df257cc549cfa815db2c74266ea55fdfcecbc6283cd99e47d735dd41345ea558ef6bec2f4a6ce74
SSDEEP
12288:e4SYUCBvwH9/C9fZsfsDIU877Hdf3KzDu8aeijtMIJzN0rI3iQXu:e4SYUCNwtC9fWsDcduuhjSQiQXu
Checks for missing Authenticode signature.
resource |
---|
NEAS.5081ad6125016c23ae52bce16135cbd0.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrW
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE