������������
����
�漴�߳̾���
Behavioral task
behavioral1
Sample
NEAS.7379736ef84e8e6af71afb8509ed7460.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.7379736ef84e8e6af71afb8509ed7460.dll
Resource
win10v2004-20231023-en
Target
NEAS.7379736ef84e8e6af71afb8509ed7460.exe
Size
620KB
MD5
7379736ef84e8e6af71afb8509ed7460
SHA1
d6622f41a8e859151823eca651b2bf2b8c88eb98
SHA256
2999c4b1ad6f4dd4bc3a1ea304fe85986866c186aba9f2c185cb4e85d3d6833d
SHA512
eefbb4bfdc391d09f4ba7b8c2cf4030ce4549877159d6997e92335fce27cbe9b56e187b670ffe0909202850ceb692018673f8261dcbff03695ffb7258caa046a
SSDEEP
12288:N12wACjrAd7Az4EY1Kxg7M40xlGVbA+NZKjjUuzhEqOIx4UQueeOj79PZ:N12z7+H6KxHlGVJNZKjjrK7IqdPJRh
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
NEAS.7379736ef84e8e6af71afb8509ed7460.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetStdHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
OpenClipboard
CreateRectRgnIndirect
waveOutReset
ClosePrinter
RegCreateKeyExA
Shell_NotifyIconA
OleUninitialize
LHashValOfNameSys
ImageList_Destroy
ioctlsocket
GetFileTitleA
������������
����
�漴�߳̾���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ