NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
df0d019d28e898d79bc0856792fe1f72.dll
Resource
win7-20240221-en
Target
df0d019d28e898d79bc0856792fe1f72
Size
155KB
MD5
df0d019d28e898d79bc0856792fe1f72
SHA1
e7216bc366bc67b567dc341a64e4341d10d11703
SHA256
1f0dca0807e591bd65dd62f975e91fea9b294e76b5f82d6b536677acf570e67c
SHA512
aa1fa37a5079195ad85de0341fbc8997e417fd4debe816a8824a6e27c68691cf7cc77b5b959bf51e8c2a10717788ac959d320d530c79a3622d1a4f593ade713f
SSDEEP
3072:MORtKm6tPvjUosLefKycXI/vthPscTBftp5pnVP3W:NRz6t1sLeCDI//PscTBlpjnN3W
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
df0d019d28e898d79bc0856792fe1f72 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE