InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
d427defff4e77740faf881248680cb73f7c15ff4eea86a51b87947ed8b6db0ac.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d427defff4e77740faf881248680cb73f7c15ff4eea86a51b87947ed8b6db0ac.dll
Resource
win10v2004-20220901-en
Target
d427defff4e77740faf881248680cb73f7c15ff4eea86a51b87947ed8b6db0ac
Size
32KB
MD5
234c57c14c0cf41f5da3ca80c79146e0
SHA1
b93910b5a0c918a864429d6e8481bdaf508e3bc1
SHA256
d427defff4e77740faf881248680cb73f7c15ff4eea86a51b87947ed8b6db0ac
SHA512
5a9b58a63c13714abce486f051cb2fab7c512d0ba38bfbebd667f26044ed610c6146574e86028f8444f7aa271904d57042886810aa8bd251d44b9134e82da913
SSDEEP
384:AgEKkowhbK2GPZglEpU4CG+xjqx4afOhlOaekdn0:AgPkoaPaZgBFk4OEOax50
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ