ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
Behavioral task
behavioral1
Sample
NEAS.c8d8efe9af94983af05ae0ba46b851e0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c8d8efe9af94983af05ae0ba46b851e0.dll
Resource
win10v2004-20231020-en
Target
NEAS.c8d8efe9af94983af05ae0ba46b851e0.exe
Size
459KB
MD5
c8d8efe9af94983af05ae0ba46b851e0
SHA1
df93b14acbbe10bc12424347dd9e0ebd2f26c224
SHA256
bc599849b1a90e668f987941d875aae438f371e8cbadf079432b34a03f4ae314
SHA512
353c7a67c553881bed4f8b483bb8aa409fa94bf7fafcd5dbb615e854f983215ac6612a0006ec12feabbb42b426268fc94eaafde85c5e3c1a62ea92f663093e58
SSDEEP
1536:i3C8wUcw1dwm8qlwn4iEv72oIY6bGkPwTufpXeTVZR3AWgCuNjC2WL2Roy:o0UXEfhEYbzPCTVZR3AWijGLMoy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.c8d8efe9af94983af05ae0ba46b851e0.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE