NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
ef859ba5373913653bde9cfc968eec44681e3402f9da9c0a6cc6a28dd9bd49a2.dll
Resource
win7-20221111-en
Target
ef859ba5373913653bde9cfc968eec44681e3402f9da9c0a6cc6a28dd9bd49a2
Size
152KB
MD5
d608d68b613fe77216a5b871609559a0
SHA1
ca9c8ed06dd931fcb74827a69ee214a6c7cd6f48
SHA256
ef859ba5373913653bde9cfc968eec44681e3402f9da9c0a6cc6a28dd9bd49a2
SHA512
a9c6645e14c0a5083af6e50360b0de1ceaf54f37ad12f3c803f15c46b854c9a241dc799488ffeabe160e9e096e16e880f992ae269e8d0b5ee66e4631f47f2eba
SSDEEP
3072:CORtKm6tPvjUosLefKycXI/vthPscTBftp5xnVP3:fRz6t1sLeCDI//PscTBlpvnN3
resource | yara_rule |
---|---|
sample | family_gh0strat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE