NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
cafc5dfcbe8e72afd3a972d88a88e1f76a5d1c06a15773561f97ad5364ecab9e.dll
Resource
win7-20220812-en
Target
cafc5dfcbe8e72afd3a972d88a88e1f76a5d1c06a15773561f97ad5364ecab9e
Size
155KB
MD5
5859582e88df6bf048bd5137e02b4d27
SHA1
b6609b280d4f85819072f9c9bd484a837d7bdf4a
SHA256
cafc5dfcbe8e72afd3a972d88a88e1f76a5d1c06a15773561f97ad5364ecab9e
SHA512
32eb788e983e94b190c7207e74f47d394feb565e88825b948113e89f0660958d43fc7f043a0101caffe1ee567ab0fa8d7ca9dc6a06ccf3692e642498ff6985f8
SSDEEP
3072:4ORtKm6tPvjUosLefKycXI/vthPscTBftp5+nVP3I:xRz6t1sLeCDI//PscTBlpUnN3I
resource | yara_rule |
---|---|
sample | family_gh0strat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE