npsExtDelete
npsExtFreeResult
npsExtNew
npsExtRequestCmd
Static task
static1
Behavioral task
behavioral1
Sample
c937101607680e4c98bee3d2d5a9a0c3865bde52b434d3350ae5a6ebc185a678.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c937101607680e4c98bee3d2d5a9a0c3865bde52b434d3350ae5a6ebc185a678.dll
Resource
win10v2004-20231215-en
Target
c937101607680e4c98bee3d2d5a9a0c3865bde52b434d3350ae5a6ebc185a678
Size
273KB
MD5
1a091c316db4b35d3531afc2572f8b46
SHA1
6dff6597a95d82916b467fde9a761a43b2e5b889
SHA256
c937101607680e4c98bee3d2d5a9a0c3865bde52b434d3350ae5a6ebc185a678
SHA512
1cca5418730784136cd2e929987dfc716b25745c827b9703e5a6f89295995d531e08fe089fe1cd927feadf1b4b13925de178c6e77bb1b8b52b29f3b11b8fc973
SSDEEP
6144:68QrrKEKrXHloFgR8+52YMPlwJlQCndEHqir:vQrAHJR8gMPYx+Hqy
Checks for missing Authenticode signature.
resource |
---|
c937101607680e4c98bee3d2d5a9a0c3865bde52b434d3350ae5a6ebc185a678 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
inet_addr
select
WSAGetLastError
htons
WSACleanup
recv
socket
closesocket
send
CompareStringA
GetProcessHeap
SetEndOfFile
GetLocaleInfoW
GetExitCodeProcess
CreateFileA
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
GetFullPathNameA
SystemTimeToFileTime
CreateDirectoryA
FindFirstFileA
FindClose
GetLocalTime
FindNextFileA
GetSystemTime
GetTickCount
FormatMessageA
GetLastError
GetModuleFileNameA
GetModuleHandleA
MultiByteToWideChar
CompareStringW
Process32First
Sleep
MulDiv
GetProcAddress
DisableThreadLibraryCalls
LoadLibraryA
Process32Next
CreateToolhelp32Snapshot
CloseHandle
WaitForSingleObject
CreateProcessA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetEnvironmentVariableA
FreeLibrary
HeapFree
GetFileAttributesA
ExitProcess
HeapSize
VirtualAlloc
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
ExitThread
ResumeThread
CreateThread
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
WriteFile
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ReadFile
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
SetWindowTextA
DialogBoxParamA
PostMessageA
GetActiveWindow
GetWindowRect
SendDlgItemMessageA
GetDC
GetForegroundWindow
OffsetRect
GetDlgItem
EndDialog
GetDesktopWindow
SetWindowPos
ShowWindow
CopyRect
GetDeviceCaps
CreateFontA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
npsExtDelete
npsExtFreeResult
npsExtNew
npsExtRequestCmd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ