Extra
Extra2
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c15aae966d1dcb3dbb8d8b8394a51350_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c15aae966d1dcb3dbb8d8b8394a51350_JC.dll
Resource
win10v2004-20231023-en
Target
NEAS.c15aae966d1dcb3dbb8d8b8394a51350_JC.exe
Size
859KB
MD5
c15aae966d1dcb3dbb8d8b8394a51350
SHA1
6d5be1aa597bc5f4b0f5aecd6df5da96622fd483
SHA256
2b22ac85132290a1e343604cbfe8f9480db9c259850bb0b73edbd18dcf09984f
SHA512
42edd514f75fc3b77bc367916ee87b5a2e4edafcaf23a8858ec00fd7d6ce1437ff657e07779254f11783fb0b09966fe6040d5fc9ae470161b917b409b4cf7522
SSDEEP
24576:h1PXm+b3ziHD7COSJeMCBV9y2nInosDp:DXm+XlCBV9y2ncxp
Checks for missing Authenticode signature.
resource |
---|
NEAS.c15aae966d1dcb3dbb8d8b8394a51350_JC.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetLastError
VirtualAlloc
EnterCriticalSection
lstrcmpiW
DeleteCriticalSection
GetCurrentProcessId
GetCurrentProcess
GetModuleHandleA
MapViewOfFileEx
SetLastError
GetProcessId
DuplicateHandle
GetNamedPipeInfo
GetFileType
LoadLibraryW
VirtualProtect
GetCurrentThreadId
DebugBreak
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
ExitProcess
FreeLibraryAndExitThread
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetModuleFileNameW
GetThreadContext
SetThreadContext
VirtualQuery
GetCurrentThread
VirtualFree
Thread32First
Thread32Next
SetThreadPriority
OpenThread
GetThreadPriority
CreateToolhelp32Snapshot
CloseHandle
SuspendThread
ResumeThread
QueryPerformanceCounter
OutputDebugStringW
QueryPerformanceFrequency
OutputDebugStringA
GetTickCount
LocalAlloc
ExpandEnvironmentStringsW
GetModuleHandleExA
GetModuleFileNameA
HeapAlloc
HeapFree
GetModuleHandleW
InterlockedExchange
WideCharToMultiByte
GetComputerNameW
GetVersionExW
ReadFile
SetErrorMode
MultiByteToWideChar
GetStringTypeW
EncodePointer
HeapReAlloc
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCommandLineA
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetModuleHandleExW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
WriteFile
EnumWindows
GetWindowLongW
GetClassNameW
EnumChildWindows
IsWindowVisible
SetWindowLongW
SysAllocString
VariantClear
VariantInit
SysFreeString
Extra
Extra2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ