InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
Behavioral task
behavioral1
Sample
82dd3aec53196a367a700b8cccaf33d3a926a979d14257a75647db06e1b7dbd8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82dd3aec53196a367a700b8cccaf33d3a926a979d14257a75647db06e1b7dbd8.dll
Resource
win10v2004-20220901-en
Target
82dd3aec53196a367a700b8cccaf33d3a926a979d14257a75647db06e1b7dbd8
Size
16KB
MD5
b04a0b5b1d18231707e8949a7e3f891f
SHA1
a09db7217ad9ea24c67cfaf9f82b52c681cb7846
SHA256
82dd3aec53196a367a700b8cccaf33d3a926a979d14257a75647db06e1b7dbd8
SHA512
f27590b960d44a83068691fbc0c9484046cb80eca88fefaa18a53da3a04090707a18ac99af736651a4c4d953bf027f184f5911b070521d9028dbfec767fa2a1b
SSDEEP
384:twKwXVpJEJ/7Ume8smb5JBZxhIg7ONXqHL4a:yxlp2JzwmbvBZxhJ7ONfa
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ