SetDIPSHook
SetEnumHook
Behavioral task
behavioral1
Sample
NEAS.538ff41446693540c8cfeb4f23d016f0_JC.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.538ff41446693540c8cfeb4f23d016f0_JC.dll
Resource
win10v2004-20231023-en
Target
NEAS.538ff41446693540c8cfeb4f23d016f0_JC.exe
Size
6KB
MD5
538ff41446693540c8cfeb4f23d016f0
SHA1
8370c4eefee1eb825d976e04cefa8bfaf854ee9a
SHA256
e24133c6cd89e1defd123c4c95b2faa203e1ac7bfeb1f0babc7a2e777b56670d
SHA512
9a5978828efdfc5afde3394208225c62882285a0ed9638f49f8440de5ec8d09c013d421251be27e212440bd840bdaacd0e015201b7edbd93497c283e5a22c3ef
SSDEEP
96:Zb+c0IZQ+yRdSL8sVsgt7oGleFfxLQGI24IB:ZqwO+eSIw6EVu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
NEAS.538ff41446693540c8cfeb4f23d016f0_JC.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetDIPSHook
SetEnumHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ