InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
eb701156fdede8ca6dbb341e736fe12602868d9d8d025b6c326dc1fbb18c3742.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb701156fdede8ca6dbb341e736fe12602868d9d8d025b6c326dc1fbb18c3742.dll
Resource
win10v2004-20220812-en
Target
eb701156fdede8ca6dbb341e736fe12602868d9d8d025b6c326dc1fbb18c3742
Size
14KB
MD5
934865aa7ec00e3787d94c32e0c47dbc
SHA1
f6c3aefd05d532d6fa031fa0e220e8d43f85f46e
SHA256
eb701156fdede8ca6dbb341e736fe12602868d9d8d025b6c326dc1fbb18c3742
SHA512
a17e4bb6e4039e9e95aa9c2cfd6546652ffc1baab0bc193132f3843259b8d147c6e024a25b6af0f07455e4b26cc125d5823ebf4f8d59752db0407da506625654
SSDEEP
384:14TV05pQh94P/1Qcua3/x80YfqUF3hIUVDB:14TV0wkQcuabOjF3hb
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ