InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
Behavioral task
behavioral1
Sample
a6e2bf5deee076e7ba319e45361e9dcf1b3f1d86dd8debb2cfcd5a32ee31747f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6e2bf5deee076e7ba319e45361e9dcf1b3f1d86dd8debb2cfcd5a32ee31747f.dll
Resource
win10v2004-20221111-en
Target
a6e2bf5deee076e7ba319e45361e9dcf1b3f1d86dd8debb2cfcd5a32ee31747f
Size
18KB
MD5
52fa8cc40eac45af21e62823cfd56064
SHA1
fe4a38c12ce05f32bbf180ff2044cb362ebda6d7
SHA256
a6e2bf5deee076e7ba319e45361e9dcf1b3f1d86dd8debb2cfcd5a32ee31747f
SHA512
b07d94487494670eff5700a93f7fbb3cf358d88647cda4ebc785b95789c46c16c4e627f6edbdfe10a0ec57b1af443ab05a2880d071478c81187529db3f9034c9
SSDEEP
192:zhfykqo+sqmeGPHhH5pbfIKfxB6HCJDA9p0GWFXkACAv/siEk66K+1CdLQLefZOK:zE4XeKnpTLfxWrfGvv/Sk66KGCrfAfhA
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ