_boot_mro
boot_mro
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.673d137c576c957af0fb5498b6f94a10.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.673d137c576c957af0fb5498b6f94a10.dll
Resource
win10v2004-20231025-en
Target
NEAS.673d137c576c957af0fb5498b6f94a10.exe
Size
21KB
MD5
673d137c576c957af0fb5498b6f94a10
SHA1
53376f9e3190fefb65e1da0d7e6d2b3b45bb772d
SHA256
68a1ce01d3e650adb4832aa32d857c7d05d9bed25b5ab5623491c489723c586a
SHA512
8b956749e8f0c9aae87ada91d60e672e50d90d53dcac13d985dd1a5a644ba4d2ce7c48e4c9518b7dff6efb87e0fa43e2952aabbb045d9e299407a7ec28b40c62
SSDEEP
384:uNoLcvkipqyPZ4quU6oTh2yi3MCy9kHWOnaSCelVpre6/5j:EBJooTh27GvOnaSCel/qM5
Checks for missing Authenticode signature.
resource |
---|
NEAS.673d137c576c957af0fb5498b6f94a10.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PL_memory_wrap
Perl_av_extend
Perl_av_fetch
Perl_av_push
Perl_call_list
Perl_ckwarn
Perl_croak
Perl_croak_nocontext
Perl_croak_xs_usage
Perl_gv_efullname4
Perl_gv_init_pvn
Perl_gv_stashsv
Perl_hv_common
Perl_hv_common_key_len
Perl_hv_iterinit
Perl_hv_iterkeysv
Perl_hv_iternext_flags
Perl_mg_size
Perl_mro_get_from_name
Perl_mro_get_linear_isa
Perl_mro_get_private_data
Perl_mro_meta_init
Perl_mro_register
Perl_mro_set_mro
Perl_mro_set_private_data
Perl_newRV
Perl_newRV_noinc
Perl_newSV_type
Perl_newSVhek
Perl_newSVpvf_nocontext
Perl_newSVpvn_flags
Perl_newSVsv
Perl_newXS
Perl_newXS_flags
Perl_safesyscalloc
Perl_safesysfree
Perl_stack_grow
Perl_sv_2mortal
Perl_sv_2pv_flags
Perl_sv_catpvf_nocontext
Perl_sv_cmp_flags
Perl_sv_dec
Perl_sv_eq_flags
Perl_sv_free2
Perl_sv_isobject
Perl_sv_newmortal
Perl_sv_setiv
Perl_warner
Perl_xs_apiversion_bootcheck
Perl_xs_version_bootcheck
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
strlen
strncmp
strrchr
vfprintf
_boot_mro
boot_mro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ