InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
2481612cd235ad43ea657905908fe39f3423a2be80011070f543a0b495939dd5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2481612cd235ad43ea657905908fe39f3423a2be80011070f543a0b495939dd5.dll
Resource
win10v2004-20220812-en
Target
2481612cd235ad43ea657905908fe39f3423a2be80011070f543a0b495939dd5
Size
14KB
MD5
20039e18859a89dc98a4a9e155e3037a
SHA1
6825855b36cb3955fb5e3de838f5c4b31af0e63a
SHA256
2481612cd235ad43ea657905908fe39f3423a2be80011070f543a0b495939dd5
SHA512
7b997b69f717b52dfeae342d1ab35753efd3a287ea40d1704b8212e5c5c3f0dc6aaba2a27b0ba92ecd6ddfcd2b8e73591076c0d017b093af0d859531496bcbab
SSDEEP
384:Y4TV05pQh94P/1Qcua3/x80YfqUF3hIUVDB:Y4TV0wkQcuabOjF3hb
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ