RunDllHostCallBack
���������ͺ��κ��˺��ȸ��˹ɸж������ȹ��ȹ�
Behavioral task
behavioral1
Sample
NEAS.7fecaadba5e4653dad031fc3f4ef2230.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7fecaadba5e4653dad031fc3f4ef2230.dll
Resource
win10v2004-20231023-en
Target
NEAS.7fecaadba5e4653dad031fc3f4ef2230.exe
Size
736KB
MD5
7fecaadba5e4653dad031fc3f4ef2230
SHA1
a43c9996e945b577e9d8193554595092179633d4
SHA256
9d2b92de967cc33201ff4691bb844c2a1f6a39adcbf169b785b691ba599b1b6a
SHA512
c1ad1ca773ff86ed272fe1f182dc08d601a2bb5dde03d4abe5a63eb08e2589d5643f66649260dea225c7cd5ec6b0c7db03a88630efa2f5ba17f56f1ae413a0eb
SSDEEP
12288:fdQRt4wnE0CuTi0/7fNpIgvStYGKnRfDI/euoO3AYlIT5xSsB0jQEmlvqd:lQRFzCuTio7PIT/KnBceK9STOZml
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
NEAS.7fecaadba5e4653dad031fc3f4ef2230.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalUnlock
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
OpenClipboard
MessageBoxA
CreateRectRgnIndirect
waveOutReset
ClosePrinter
RegQueryValueA
Shell_NotifyIconA
OleUninitialize
UnRegisterTypeLi
ImageList_Destroy
ioctlsocket
GetFileTitleA
RunDllHostCallBack
���������ͺ��κ��˺��ȸ��˹ɸж������ȹ��ȹ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ