Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
86bb6ff13c5f00cbedeaec8bda22dc6587d9fd82b828304f94dd2b04778821fd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86bb6ff13c5f00cbedeaec8bda22dc6587d9fd82b828304f94dd2b04778821fd.dll
Resource
win10v2004-20220812-en
Target
86bb6ff13c5f00cbedeaec8bda22dc6587d9fd82b828304f94dd2b04778821fd
Size
17KB
MD5
0ffef6d59993844dedc60f3b5c379743
SHA1
d4d45a98fc63b1966c70046c25b204c22ec173db
SHA256
86bb6ff13c5f00cbedeaec8bda22dc6587d9fd82b828304f94dd2b04778821fd
SHA512
31d85212695656d7860a7a6b7cf181909c8925e85d4367f045771bbd87382cc74296a29c6cbb7223b86f0343ac2c15c57d5cae79dc5671dd37f90c49e05c8cc0
SSDEEP
384:+6PSmgqPpESLcz+uzAW1/JKqvE0bULxPbPA:qmgvz+WJQbo
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ