InputFile
PathCombineEx
PrintFile
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ec8cd429dc6932b563f083cc38e95460.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ec8cd429dc6932b563f083cc38e95460.dll
Resource
win10v2004-20231020-en
Target
NEAS.ec8cd429dc6932b563f083cc38e95460.exe
Size
228KB
MD5
ec8cd429dc6932b563f083cc38e95460
SHA1
91b8d52549f7a2e1022efbca50742ab989bd40c7
SHA256
8445fd0a62c7dd8de886db2ec7ad35ffd4cb6bd3fc3ef2342f2abff4fbf6699c
SHA512
d78befa88f1099fea5811297d322aa005da5da59eb00ab0b1cacf84a74700fd427ddedcdd503c2e1e0ce300381d6852458546ba0b6aadb5326b2ac1da8e9a7db
SSDEEP
6144:gi1DrXMdaA4XddLxfHfaOaamLF+1++jZxgrfkK:gO64XfLxffTALERjgrP
Checks for missing Authenticode signature.
resource |
---|
NEAS.ec8cd429dc6932b563f083cc38e95460.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
strftime
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfA
RegEnumValueA
htons
StrStrIA
CoInitializeSecurity
SafeArrayUnaccessData
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
Netbios
InputFile
PathCombineEx
PrintFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ