InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
0961d841b1b32410ee5db4889f28425c83d1ff18d6831859003336a2acb27630.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0961d841b1b32410ee5db4889f28425c83d1ff18d6831859003336a2acb27630.dll
Resource
win10v2004-20220901-en
Target
0961d841b1b32410ee5db4889f28425c83d1ff18d6831859003336a2acb27630
Size
12KB
MD5
0b9328346d25090344901d4b7f8218f5
SHA1
e81fee9d3913b70397615b90bb4f6764e64e23d0
SHA256
0961d841b1b32410ee5db4889f28425c83d1ff18d6831859003336a2acb27630
SHA512
9bb4380e0da45d70bddb7bae973229a57fb57fc44eb27800e38e04023b91c3ef3afe67d7ae944bf1d658f0ad092858c242db15dd61c49ca853fcd7fe43e792f2
SSDEEP
192:Hllq0my7J1QWSb04n4hGekZW41QKFQoihUmzkYnyRsTud9KPiMoo:Hl8Gkbb5gaW4QKSUikbOSWP
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ