DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.846c9ba3b9b1208fa51f19c443cd6c30_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.846c9ba3b9b1208fa51f19c443cd6c30_JC.dll
Resource
win10v2004-20231023-en
Target
NEAS.846c9ba3b9b1208fa51f19c443cd6c30_JC.exe
Size
14KB
MD5
846c9ba3b9b1208fa51f19c443cd6c30
SHA1
d70d6996849402832bdd21c7fcea1c3d6dac1939
SHA256
a83f589f3d8bfcfe39f67053ce0e24740f86eebfccf78b2134668b8f82483224
SHA512
6422199f43abac1d1b30a0521c051c985a085ec2dde852e647d41faca857b1d755ba301bb420c86a5a01ab94b599a87122d91f20464de05e4749134dcd7d19ed
SSDEEP
192:FmpqzIbfzCj4Wz6ixpEibQiad1AGEZr8k4TbboN74gV5aAUQ:FClbmkWzrEibQixOk4TbboN74Y5aQ
Checks for missing Authenticode signature.
resource |
---|
NEAS.846c9ba3b9b1208fa51f19c443cd6c30_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetCommandLineA
FreeLibrary
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
GlobalFree
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
RtlMoveMemory
sprintf
strlen
_wcsicmp
wcslen
IsEqualGUID
SysAllocString
SysFreeString
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ