InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
7077f2a7ddb018faadb0b23f60147eb028ac511b6d004ef36ea4f208f8889902.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7077f2a7ddb018faadb0b23f60147eb028ac511b6d004ef36ea4f208f8889902.dll
Resource
win10v2004-20220812-en
Target
7077f2a7ddb018faadb0b23f60147eb028ac511b6d004ef36ea4f208f8889902
Size
13KB
MD5
a1bab7d07cc5f574303ace90da26295a
SHA1
189dbe859d5b687ae107f537f1e460ff60624b4c
SHA256
7077f2a7ddb018faadb0b23f60147eb028ac511b6d004ef36ea4f208f8889902
SHA512
4bda2fde68d2c8e11698207578a065f1306fdc046ff4688ff309d2f346976d41a4f88e2cff8a813530384f0606de80f0a72495d4f67274260fb0fe668bb4b80d
SSDEEP
384:C/3MiIyNmevH9vZjuDkZi1ZWyEb2Djf4a:mMiIyNmOHCDk0sy5LT
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ