KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
e17fbbc0e07f3a2dd5b0f0ff7d2198bc.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e17fbbc0e07f3a2dd5b0f0ff7d2198bc.dll
Resource
win10v2004-20240226-en
Target
e17fbbc0e07f3a2dd5b0f0ff7d2198bc
Size
8KB
MD5
e17fbbc0e07f3a2dd5b0f0ff7d2198bc
SHA1
18645fa00a5b0ea0b69ac6b772299b61933b12a5
SHA256
16a4ff8947dd50ed6aec31d312b205f33a3c416afd61e81b98eb615a698c8eec
SHA512
b036912ddb8d0701102853f2468ed6359c2b256b4a26541ffde619ddadca6609aa702f4e68d4d05da2ffe4e3652e986428e72cae1360307fb9c4cdc75f7cc863
SSDEEP
96:pXa5vo/yr8x6GJFpgAp/aXC1xF35M9AfEprtrHL76BncqphAdXv5u:c5vo/ygx6GfpJ/31f35gA8pZrHf1qbA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e17fbbc0e07f3a2dd5b0f0ff7d2198bc |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ