KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
DeleteSelf
PPPP
QQQQ
Behavioral task
behavioral1
Sample
c633de6ebb10d507d564a31c13fda69b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c633de6ebb10d507d564a31c13fda69b.dll
Resource
win10v2004-20240226-en
Target
c633de6ebb10d507d564a31c13fda69b
Size
26KB
MD5
c633de6ebb10d507d564a31c13fda69b
SHA1
bbce6cfee9d7b2112a5ba0e9bf99e0e4627dc4ec
SHA256
17f384b26b742943b0009525e9d2d03193b08715eb5ea062b85f868cd2fb1cd8
SHA512
004edb2283d687bb804ba0be7a72a7cb37162a341414607df68ef78d8769bf27c05459341bb8c1bf95813b0cdafb133f484bd64e48125f1ce1b72858cdbb81f9
SSDEEP
384:0YI8yl3uyzlnahTU0zFioTBF1Vn+QABxqJQeSAPhhVUTD+fINR:HW+DooV8QaaSAxUTD+AX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c633de6ebb10d507d564a31c13fda69b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
DeleteSelf
PPPP
QQQQ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE