Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
7fab23d3fc186ce8a4f3c9a902cb6d87b2fa1d88a95026b2fae3c232fe5086d4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fab23d3fc186ce8a4f3c9a902cb6d87b2fa1d88a95026b2fae3c232fe5086d4.dll
Resource
win10v2004-20220812-en
Target
7fab23d3fc186ce8a4f3c9a902cb6d87b2fa1d88a95026b2fae3c232fe5086d4
Size
12KB
MD5
790e1a0dbe8fece8c37e383d090171c1
SHA1
9ea7101d83b8a207e6c1c993898d27771db93f63
SHA256
7fab23d3fc186ce8a4f3c9a902cb6d87b2fa1d88a95026b2fae3c232fe5086d4
SHA512
c2116638bb8c29a0b6babe53768ef6a9c3b71742a66d145c852ee8f4cc8a89825874c91828ebf61d5b77e58b51140a03d1a58adcaeb7e8c05efdff455225c90f
SSDEEP
192:YsvQqQLVXh8gaFLKlcMsDBe4dGTLlPG4pdAaTXdjjBxXp4eh6JhU89zvE4:YsvaVmzFLNDDBe9TLlb7Xdjjrns+8tv
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ