NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
1d33be1650e562d5e5afd30400b63c1e.dll
Resource
win7-20231129-en
Target
1d33be1650e562d5e5afd30400b63c1e
Size
152KB
MD5
1d33be1650e562d5e5afd30400b63c1e
SHA1
e49bbfa15aeb73a7f100c72b3a0ca43150635c39
SHA256
39e03930f3930448b6497104aba41f29a88573cb04bc22d16b7c8169e145faff
SHA512
20096b95c9a876ce7cc8ee8815e98139d1169314945d43db4397e52d53f20fde8ac1dd7104fa7c42de7d77befb8dcbb29845ea1d64d400f286b40b57d89b5992
SSDEEP
3072:IORtKm6tPvjUosLefKycXI/vthPCcTBftp5HnVP3:BRz6t1sLeCDI//PCcTBlpJnN3
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
1d33be1650e562d5e5afd30400b63c1e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE