NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
245b560727ee397269eec8ca02d56a439516cbd3b6041c6a69635ff14e3bfea1.dll
Resource
win7-20220812-en
Target
245b560727ee397269eec8ca02d56a439516cbd3b6041c6a69635ff14e3bfea1
Size
152KB
MD5
c89a65f850a3f6161433bbc04d937130
SHA1
59bf6101ce0dbaef78fcf656abda7bac49d46128
SHA256
245b560727ee397269eec8ca02d56a439516cbd3b6041c6a69635ff14e3bfea1
SHA512
4656c9f0ab4441f083f491e79728c15bf058b1104c75580743f9bfd69e09e237cd81a9b05feb13cdafb706fa41870e517387088119f47633d114104d2caf81de
SSDEEP
3072:vORtKm6tPvjUosLefKycXI/vthPCcTBftp5AnVP3:WRz6t1sLeCDI//PCcTBlpqnN3
resource | yara_rule |
---|---|
sample | family_gh0strat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE