NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
Behavioral task
behavioral1
Sample
ac24689a4c8c6d59e9ba109795e8d89960cc2b0b42e533d2a4c99058eed152bb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac24689a4c8c6d59e9ba109795e8d89960cc2b0b42e533d2a4c99058eed152bb.dll
Resource
win10v2004-20220812-en
Target
ac24689a4c8c6d59e9ba109795e8d89960cc2b0b42e533d2a4c99058eed152bb
Size
152KB
MD5
9d5557abdbc8abc603255e54040a7733
SHA1
fb43109729272e4a6bc8cb99ca66e32413196036
SHA256
ac24689a4c8c6d59e9ba109795e8d89960cc2b0b42e533d2a4c99058eed152bb
SHA512
9433f0a4f166e0d85add692cb949706ac401cab51983ed64460e170d4e26f2dbce8ff4c3a534f5dc17ca47577c2c2e55a366fc85f0650c3603fd9a0743ffe0ce
SSDEEP
3072:0BPSfxyOmPD8IW4+Pqbs0YPx5zcTBfthHr5GnFPn:0BGyPWbyFYPbzcTBlhHrkndn
resource | yara_rule |
---|---|
sample | family_gh0strat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ