InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
1354e4df9b282b03db1760a7e2e9d0a0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1354e4df9b282b03db1760a7e2e9d0a0.dll
Resource
win10v2004-20231215-en
Target
1354e4df9b282b03db1760a7e2e9d0a0
Size
14KB
MD5
1354e4df9b282b03db1760a7e2e9d0a0
SHA1
74f69ff970d8856619acd6586aa03a80fd8a5409
SHA256
d47dd6cdd04fb13d49f1b37cda5b246a91addfe95558672050d544d6c8a55ed2
SHA512
a9c35afb05bb01564d4e142bbd28469173cf4df4e220f094e84f12f35e13b76dfa404727187d0f6fc71183bb8e1f4f8bd47070c6dcfdab8426f1432cb3cf76dc
SSDEEP
384:udSATz4qYEndXJxP6oP7Tl/9JrgWJu/X/b+:uLLTpJxPN17rgl/Xj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1354e4df9b282b03db1760a7e2e9d0a0 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ