InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
0109dbb1db11891a707dce3c983b9bc4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0109dbb1db11891a707dce3c983b9bc4.dll
Resource
win10v2004-20231215-en
Target
0109dbb1db11891a707dce3c983b9bc4
Size
16KB
MD5
0109dbb1db11891a707dce3c983b9bc4
SHA1
d2a7d4c5e057fbaf03f95a0b5bb47f730d160351
SHA256
e734c978af6e3d81b5acfd35d70e7fef80e9a5721aeca14837aff1719390ed87
SHA512
af64e47f8bf012c523cfc3bddd6733996d31dfd0f4ce9f4f2bde403ed6978c849bcb0d3471adcb3ff487e86d8d9a95293ee962a4e436029f2e6a99611b8ef4ae
SSDEEP
192:Xllq0my7J1QWSb04n4hGekZW41QKFQoihUmzkYnyRsTud9KPiMoo1d3fk:Xl8Gkbb5gaW4QKSUikbOSWPJd3fk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0109dbb1db11891a707dce3c983b9bc4 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ