Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
a99d62ba778cbc7f0cacdba6319623527316eb1b542e4fb18f293de6e2b2e998.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a99d62ba778cbc7f0cacdba6319623527316eb1b542e4fb18f293de6e2b2e998.dll
Resource
win10v2004-20220812-en
Target
a99d62ba778cbc7f0cacdba6319623527316eb1b542e4fb18f293de6e2b2e998
Size
12KB
MD5
7d0c9f2b4bda916c0a7814c510300cc4
SHA1
3cce467c847a9df9fa82f031eba964c2a7e73343
SHA256
a99d62ba778cbc7f0cacdba6319623527316eb1b542e4fb18f293de6e2b2e998
SHA512
86eb6e08b560a13ee220d9d077f0ff91fd782de9a43911190d4641584ca1e21910dac254fb62ca70f53d12620f1063f8e067a368fc188c0ef8181e978f87478c
SSDEEP
192:hAqObz3mDHCLGnZNKeSIfoM2GawqFi6AzryJlFzzrBo+VQaHBzfo9OXsL:Ubz3IDK1IyZ86AzgFzzrBf7JXQ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ