C_Connect
C_send
LicDecode
RSAP_Decode
RSAP_Encode
S_Start
chkModList
Behavioral task
behavioral1
Sample
NEAS.e7a6ed43ea18934838e5061f80368fd261d04006220eaac6c584742225a01c64dll_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e7a6ed43ea18934838e5061f80368fd261d04006220eaac6c584742225a01c64dll_JC.dll
Resource
win10v2004-20231023-en
Target
NEAS.e7a6ed43ea18934838e5061f80368fd261d04006220eaac6c584742225a01c64dll_JC.exe
Size
353KB
MD5
6b2385d15e3245449abe7c09a47e6c80
SHA1
9b91b3c923caee0259bd6bb73de4c116ececb946
SHA256
e7a6ed43ea18934838e5061f80368fd261d04006220eaac6c584742225a01c64
SHA512
7d3291c9556c13ca35e4c2a54f1390b891c99ca3cd7ac9edf5cb8fab85e43a4bec1f271534e3141907be152c3ab41e700f24776c2095f384d1836afb81241472
SSDEEP
6144:JV7n4O9gIjxtwVlanyvMC+oSKtOCORcxsfcemTg:JR4hI1tOlrvsoSKtOC4fcTg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.e7a6ed43ea18934838e5061f80368fd261d04006220eaac6c584742225a01c64dll_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
C_Connect
C_send
LicDecode
RSAP_Decode
RSAP_Encode
S_Start
chkModList
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE