RampOldTri
g_RampOld_BeadTbl
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1638d9ef53b1532560572764b63c66d0.dll
Resource
win10v2004-20231023-en
Target
NEAS.1638d9ef53b1532560572764b63c66d0.exe
Size
721KB
MD5
1638d9ef53b1532560572764b63c66d0
SHA1
2eb49e7f131e18be14d2a919406d3f69aaae7d78
SHA256
5d4aa5c05a45df2893ba0cb5cfe16b19d781c6aecf4ac6516aea96bbcf9af6fb
SHA512
e61acf5a658e966465f820a693e4fc7ced0200ab56f9ee6f538268b0a52929ff688751a53abc40a0bb7bb664c72a5f1bf88025d7386860eb2db134c30f31ca89
SSDEEP
12288:Bdduf8BFVToRoT4Jfqn3J2tmnWU/gz08mPoaN:TToRoT4JfMJPnWU/g48mPNN
Checks for missing Authenticode signature.
resource |
---|
NEAS.1638d9ef53b1532560572764b63c66d0.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler4_common
_XcptFilter
_initterm
malloc
free
_amsg_exit
Sleep
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RampOldTri
g_RampOld_BeadTbl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ