SGSUB161
XSGSUB161
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7fb78888d2e84fb557736ce1acd68810_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7fb78888d2e84fb557736ce1acd68810_JC.dll
Resource
win10v2004-20231020-en
Target
NEAS.7fb78888d2e84fb557736ce1acd68810_JC.exe
Size
30KB
MD5
7fb78888d2e84fb557736ce1acd68810
SHA1
c10c37b59a2557e6e5a8f73cf63a8e9a86bc7639
SHA256
c94eee7d532c6bc8ef97741173c233f5f3013ad57627997cfe9e5864415ac18a
SHA512
b7e73bc513fe6847fdb98945c69ba7d8d7cd6a59c55efd2b62cc95b82c5bbf2d2d745a9d75d52c0375f9735d0986fcd7cab3045deb6161bf926e1c128b48345a
SSDEEP
384:5KMtWZSj0oUFkGGiZqFxLMHfWDue9TCw7Or+fJoRbK8UnVtY:M3sjskyIFR0Su4vluYxD
Checks for missing Authenticode signature.
resource |
---|
NEAS.7fb78888d2e84fb557736ce1acd68810_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mFt_ld_tab_func_search
_mFg2star_init_dll
mFt_load_ldnames
CBL_RENAME_FILE
_mFerr
_mFentry
_mFargt
CBL_DELETE_FILE
CBL_CREATE_DIR
_mFg2star_fast
_mFgAE
GetCurrentProcess
LoadLibraryA
VirtualAlloc
HeapFree
HeapAlloc
WriteFile
DisableThreadLibraryCalls
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
VirtualFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
SGSUB161
XSGSUB161
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ