Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
d16fb66a8fd2177425b1a992fcfad742562b740c3800729a7fffc48ddbc2b058.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d16fb66a8fd2177425b1a992fcfad742562b740c3800729a7fffc48ddbc2b058.dll
Resource
win10v2004-20220812-en
Target
d16fb66a8fd2177425b1a992fcfad742562b740c3800729a7fffc48ddbc2b058
Size
17KB
MD5
aee75b75887415cf55acfab3d1854a4a
SHA1
6eb8efdace35496f22f7bccbb34aecfcf7bde5bd
SHA256
d16fb66a8fd2177425b1a992fcfad742562b740c3800729a7fffc48ddbc2b058
SHA512
6800a5890a90638195229e580fd9147439c329be7202492db3eccf9a5931254204ba82a4b1b4807d544b68526d531e6addbb6b8f6e9d2cef12d0384fcfafacad
SSDEEP
384:nfaq68akYT4pgbXGBXVknq/0p/A7aCtJOLW2K/AFghBzLpyqK9b5+:fF1bp7XVCggudtJOLW6MptyT9bg
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ