DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
2fc21ceaf621e01868118e80d89c41afdec0648770207b5daa05773ddadd06baN.dll
Resource
win7-20240704-en
Target
2fc21ceaf621e01868118e80d89c41afdec0648770207b5daa05773ddadd06baN
Size
18KB
MD5
f052d4004e1b0af60011980f86bc9600
SHA1
3cfbf25cf59fac3be024e59d1f91e7e9ff990f91
SHA256
2fc21ceaf621e01868118e80d89c41afdec0648770207b5daa05773ddadd06ba
SHA512
8e89bacd84eb9bf5a2f3e29e24a1ab0417f7526b1458da89f60b31a8c4ea0fa199a2c69463af7d6567fe8a0ec8753ac8f58302a113e07545c1594d32324ea1a1
SSDEEP
384:/RucCUAIzICdNTmaqXM/O9PCWbpmKvz5B2Bu5:ZH6GNiG/O5JbpmELcu5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2fc21ceaf621e01868118e80d89c41afdec0648770207b5daa05773ddadd06baN |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ