myclose
myinit
mypclose
mypinit
Behavioral task
behavioral1
Sample
NEAS.a85da0bba81d62b24a4c64bbffcafdb0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a85da0bba81d62b24a4c64bbffcafdb0.dll
Resource
win10v2004-20231020-en
Target
NEAS.a85da0bba81d62b24a4c64bbffcafdb0.exe
Size
108KB
MD5
a85da0bba81d62b24a4c64bbffcafdb0
SHA1
24a2da8010bdd705f5e5c217b503d35591fbb206
SHA256
09934cd3c85afd6060ac0dc6d95325cdbf7f1d257b19a66c556083c495a464c0
SHA512
eec200dcbe348646a7f486c8bee9f590a7b3955d74a9d7c9dae8f576f04da7ee83d1ad5d88b6a2205413611cef10e61a8a777891f170954f6d4242e11dacad32
SSDEEP
1536:QktY5jkSsWx5yJy8WL7eolVMSfCozA1px86cdfnNyy5PrnI49s2YUTENeAmnouyL:QkuxkSsWxWrWXpMbGAG71F6ZWoutC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.a85da0bba81d62b24a4c64bbffcafdb0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
myclose
myinit
mypclose
mypinit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE