Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
9b0ab748a382a3b0a04cf86524c2b339c5c8434f40b5814ca8c8e0383f915235.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b0ab748a382a3b0a04cf86524c2b339c5c8434f40b5814ca8c8e0383f915235.dll
Resource
win10v2004-20220812-en
Target
9b0ab748a382a3b0a04cf86524c2b339c5c8434f40b5814ca8c8e0383f915235
Size
17KB
MD5
efa92265d6791f920d6aaf008746ea70
SHA1
9b115803550d4af7b158e128f9ec90d9e9921c06
SHA256
9b0ab748a382a3b0a04cf86524c2b339c5c8434f40b5814ca8c8e0383f915235
SHA512
ef39a761d751541bd3455342daa99b5a3d63626d2b3a61db97c2c785d0faeaafab04d1cb567480cb3dbd210bdee9904050014a50cc2c847ef7715425f4dd6cb3
SSDEEP
384:cFb+SB+aT3l5rQgi3huRMI6uHsh8S2RHjgEiZc:0b+SIirQgJR56Th8fHRiZc
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ