NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
Behavioral task
behavioral1
Sample
8a1640afa8b0e3716a1ec8a8c3dc62343fd6f4f779f775f2dfbb10cb0aa31f60.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a1640afa8b0e3716a1ec8a8c3dc62343fd6f4f779f775f2dfbb10cb0aa31f60.dll
Resource
win10v2004-20220812-en
Target
8a1640afa8b0e3716a1ec8a8c3dc62343fd6f4f779f775f2dfbb10cb0aa31f60
Size
152KB
MD5
54d497d166e66df61e976f1389949b20
SHA1
9c9ce8282a0ac7e60a8fecef8f859cf444f29cc2
SHA256
8a1640afa8b0e3716a1ec8a8c3dc62343fd6f4f779f775f2dfbb10cb0aa31f60
SHA512
a5f235453b1130a6d03faa46f054e249b40c01ca8984716826a714e63d2cec49561949bd22eee55fd53babdf3aee6de06ff3812f4d44a7805e33b1f018cbaf46
SSDEEP
3072:hwQyDOyAuqDi0zWcCUPu0YYkw1VlBfU+opiSn7P7:hwEy0z7JTYY11VlBM+opvnT7
resource | yara_rule |
---|---|
sample | family_gh0strat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ