@GetFirstVice@0
@GetVice@0
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1f26659e7f05697661eaed3f797084b0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1f26659e7f05697661eaed3f797084b0.exe
Resource
win10v2004-20231023-en
Target
NEAS.1f26659e7f05697661eaed3f797084b0.exe
Size
186KB
MD5
1f26659e7f05697661eaed3f797084b0
SHA1
9cc1509ee51087944bb1e808a7ce54c6547a0e01
SHA256
c630a34c7cc79686295b56d789d3ff5e09542d6f8ee7a578f20131c020ea1581
SHA512
d686e10e26388d971554eba314ac42765a9f0e426a687cb20a8b9ebeedfc6d758d68732cb38f16f73dbc56b662a35d284fcd8bef5ed83be1d5c7e467c4d39e95
SSDEEP
1536:IU5G5jT/hYzTVn3WsbD1fVe8nZuKcNV6/CaoKF2WxwQms9UgwH5huCQG4FcaE5Bd:IUKf5ih3bDhCyzFUgEhuCQib9KoqS5H1
Checks for missing Authenticode signature.
resource |
---|
NEAS.1f26659e7f05697661eaed3f797084b0.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemDefaultLCID
AddRefActCtx
GetCPInfoExA
WriteConsoleInputW
ReadConsoleInputW
GetTapeParameters
WaitCommEvent
GetNumaProcessorNode
GetConsoleCP
VerifyVersionInfoA
WaitNamedPipeW
CreateMutexA
WriteConsoleW
GetLastError
CreateFileA
DeleteFileW
WritePrivateProfileSectionA
GetPrivateProfileSectionW
GetLongPathNameW
SetStdHandle
LoadLibraryW
IsDebuggerPresent
FindFirstVolumeW
WriteFile
BuildCommDCBW
FindActCtxSectionStringW
VerLanguageNameW
SetFileShortNameA
WriteProcessMemory
GetFileAttributesW
SetEvent
IsBadReadPtr
SleepEx
GetLongPathNameA
LoadResource
GetProfileIntA
SetConsoleCtrlHandler
SetConsoleTitleW
GenerateConsoleCtrlEvent
GetCurrentConsoleFont
SetConsoleTextAttribute
AttachConsole
GetConsoleAliasesLengthW
ReadConsoleA
ReadConsoleOutputW
BuildCommDCBAndTimeoutsA
GetGeoInfoW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
CreateThread
GetVersionExW
GetACP
WaitForMultipleObjects
VerifyVersionInfoW
SetCalendarInfoA
CommConfigDialogA
GetConsoleWindow
FindAtomW
SetFileApisToOEM
GetStringTypeA
HeapSize
GetDiskFreeSpaceA
GetTapePosition
GetConsoleAliasesLengthA
InterlockedPopEntrySList
EnumDateFormatsW
WaitForSingleObject
GetCommandLineA
GetStartupInfoA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ReadFile
TerminateProcess
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
CloseHandle
GetAltTabInfoW
AdjustTokenPrivileges
AdjustTokenGroups
MapGenericMask
AreAllAccessesGranted
@GetFirstVice@0
@GetVice@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ