DllRegisterServer
MemCpy
StrCmp
StrLen
W2Anicmp
_GetModuleBase
_GetProcAddr
gBuf
x
x.1
x.11
x.3
x.5
x.7
x.9
y
y.10
y.12
y.2
y.4
y.6
y.8
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3ddc46f867efba7da387e696ffc144d0_JC.dll
Resource
win7-20231023-en
Target
NEAS.3ddc46f867efba7da387e696ffc144d0_JC.exe
Size
4.0MB
MD5
3ddc46f867efba7da387e696ffc144d0
SHA1
db33c1c16b7888005cb6ca2cea09752b9e3f19ce
SHA256
436fa6e822a9edfba458e5af3d8d72afc1fb3515bc7cc13ba86dfb36b3333668
SHA512
22318ff4096104ef48b337a875ba497eda8696a7ae70e007251faa8902a7378a9039e7f2afa4402cdeec49c2960a66733ae63cc677b0f0cf9497f433cc5986c0
SSDEEP
24576:sKoqvLoysUYXVmsfGFm5d88An8oaVirpoTDX4bl54vTsZcdBxnnvopMi2nOLGtyp:gLasfeastd
Checks for missing Authenticode signature.
| resource |
|---|
| NEAS.3ddc46f867efba7da387e696ffc144d0_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
signal
strlen
strncmp
vfprintf
DllRegisterServer
MemCpy
StrCmp
StrLen
W2Anicmp
_GetModuleBase
_GetProcAddr
gBuf
x
x.1
x.11
x.3
x.5
x.7
x.9
y
y.10
y.12
y.2
y.4
y.6
y.8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ