Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
30dee4d8bc635d90671f78228bc519318b71f07ba1e958c94e2de3b165078644.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
30dee4d8bc635d90671f78228bc519318b71f07ba1e958c94e2de3b165078644.dll
Resource
win10v2004-20220812-en
Target
30dee4d8bc635d90671f78228bc519318b71f07ba1e958c94e2de3b165078644
Size
12KB
MD5
4ce7458c5e6c370dc8aceb12826408b0
SHA1
9d9a8ae9e7d26e2678c00913d337cf2864edcce4
SHA256
30dee4d8bc635d90671f78228bc519318b71f07ba1e958c94e2de3b165078644
SHA512
d3ee39aed49920b1f8e2189d229aefc74f295d6a4df3855dc141454af5059a0dd33e5c2c8b1d73441dfbf41697fe22211d7fc5e0e92de9027fac90b607d475e3
SSDEEP
192:0AqObz3mDHCLGnZNKeSIfoM2GawqFi6AzryJlFzzrBo+VQaHBzfo9OXsL:bbz3IDK1IyZ86AzgFzzrBf7JXQ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ