NPAddConnection
NPAddConnectioN3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
Behavioral task
behavioral1
Sample
b8f1255900dc97942434f6f906db07b2.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8f1255900dc97942434f6f906db07b2.dll
Resource
win10v2004-20240226-en
Target
b8f1255900dc97942434f6f906db07b2
Size
296KB
MD5
b8f1255900dc97942434f6f906db07b2
SHA1
0a1e8e24331c63a1489c04767773ab567655bc2e
SHA256
4afe53f6e046a0f88f976e60599984d945fa166ce77eafc46893eecd50f2cf39
SHA512
21378dbf2092acfab6ffb334195e9672b6236f6a0d002881152b2429c0a5aa589a685bd2d76989df94c2ada61870f45a606e36db0953cd12c9d5266fb17954b4
SSDEEP
6144:lBTyPRqyhYPbncTBlhHrzndnkv0/1Q83cebsqQz5xr1+1cBgVqil11M:mJq8YPbncT3SZ8Meb+z5RTCblA
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
b8f1255900dc97942434f6f906db07b2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NPAddConnection
NPAddConnectioN3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
NPGetResourceParent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ