?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
37aa5c694043e8ebe643df8b0f54b9e0_NEAS.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
37aa5c694043e8ebe643df8b0f54b9e0_NEAS.dll
Resource
win10v2004-20240226-en
Target
37aa5c694043e8ebe643df8b0f54b9e0_NEAS
Size
3KB
MD5
37aa5c694043e8ebe643df8b0f54b9e0
SHA1
4ed4b550d415ec57a25c14304c5ad4632a0c31f6
SHA256
c65621f1eaf9a494554e4ffc7869b15f5e836c35bd1b6cb4c5d95844859c1e89
SHA512
0393b785d210a0e4e2b144837b30fcb5f124224744d38ad0e883657f17ddd488049ad5bd017370ca904c4d325914180150e05bdddc7806356c17d67d0acd3e31
Checks for missing Authenticode signature.
resource |
---|
37aa5c694043e8ebe643df8b0f54b9e0_NEAS |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ