Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
24fe5c24ed4ffbaebf92d77758bfe82a105dfece6280c5cabced6a372eaedf71.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
24fe5c24ed4ffbaebf92d77758bfe82a105dfece6280c5cabced6a372eaedf71.dll
Resource
win10v2004-20220901-en
Target
24fe5c24ed4ffbaebf92d77758bfe82a105dfece6280c5cabced6a372eaedf71
Size
12KB
MD5
5bc995d571fb0bdbd49d1ab1cd2629e5
SHA1
3a1e0f9626425e06c10179027b33b9d4c9cc4d3b
SHA256
24fe5c24ed4ffbaebf92d77758bfe82a105dfece6280c5cabced6a372eaedf71
SHA512
1a2cf65e553c8f3ef4fa18b5f79c393e337ffdefce3cfd8165da424ff20e808dd9391e1b1c2e988e0faec40e89bfee7220df872ae77b3ce1f120212d4bd60f6a
SSDEEP
192:PAqObz3mDHCLGnZNKeSIfoM2GawqFi6AzryJlFzzrBo+VQaHBzfo9OXsL:Cbz3IDK1IyZ86AzgFzzrBf7JXQ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ