InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
Behavioral task
behavioral1
Sample
95f732c9e883593bf2598c1354e0db9f22c2850528c2700617bf953b80382a3e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95f732c9e883593bf2598c1354e0db9f22c2850528c2700617bf953b80382a3e.dll
Resource
win10v2004-20220812-en
Target
95f732c9e883593bf2598c1354e0db9f22c2850528c2700617bf953b80382a3e
Size
16KB
MD5
dc57fe5dd0325fc5456b8b64efcf8a75
SHA1
0b015fa49eb36b6361b8fd74ebd30d8b5f710c1e
SHA256
95f732c9e883593bf2598c1354e0db9f22c2850528c2700617bf953b80382a3e
SHA512
a3298ea7d2a2f0becd91c549c154888d8a6da7f1748a3a113b6337cce4edde23ffff778f8613c638f4b8c22664d075d8e07570aaaf496bc6e9e50568612b6e9a
SSDEEP
192:phfykqo+sqmeGPHhH5pbfIKfxB6HCJDA9p0GWFXkACAv/siEk66K+1CdLQLefZOi:pE4XeKnpTLfxWrfGvv/Sk66KGCrfAf
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ