?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
bb349f1d41b5a1985ac3e2af10ae8f50_NEAS.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb349f1d41b5a1985ac3e2af10ae8f50_NEAS.dll
Resource
win10v2004-20240419-en
Target
bb349f1d41b5a1985ac3e2af10ae8f50_NEAS
Size
3KB
MD5
bb349f1d41b5a1985ac3e2af10ae8f50
SHA1
28bcd31ab75104a7ba7da6c0270827fd9ebf1032
SHA256
76fbc9f87a7988d44406b13f8eca7312b929d7be5fa76f785540319b235dec30
SHA512
76a223c188ababbdd3bdddde2db76489d9f74ad187a1f507967c05a6b9d995ca87f12417749318873910b60bafaef7768b3b77796bf6487a04532427fd84cc12
Checks for missing Authenticode signature.
resource |
---|
bb349f1d41b5a1985ac3e2af10ae8f50_NEAS |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ