NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
Plugins/npclntax.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Plugins/npclntax.dll
Resource
win10v2004-20231222-en
Target
0f51b8c4d02fcaa729439316fab1e544
Size
27KB
MD5
0f51b8c4d02fcaa729439316fab1e544
SHA1
be495f333f352c3aee0a3e526c57ac068e3891f2
SHA256
bc6614dd76c534a01dfc698a8b9e965737a017ae7a8d1b1cc13ee04424ebaf9a
SHA512
67021ac560cf9998decd24e2d52a8db68ba7fb4c7352633ac6d73b745df475d2fbef04c666ca03f277313ea7bcfee22db06d735dcb45720bfc06f7f31a1ab20c
SSDEEP
384:FqUn3GIhQubsuJD8sIb7ya7rvCikrkwwtGwbfwMTM1Wty+3L0b2UDntipIGyqLrx:kUguouvkOaaikrzkDK2zb0bwWGaQ
Checks for missing Authenticode signature.
resource |
---|
unpack001/Plugins/npclntax.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapSize
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetOEMCP
GetCPInfo
LoadLibraryA
GetProcessHeap
CoUninitialize
CoCreateInstance
CoInitialize
SysAllocStringLen
SysFreeString
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ