DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
14089d9fcab62dcfde9100f145f0ff27f6b1599d1a5796283bf8ca7307a1f9e0N.dll
Resource
win7-20240903-en
Target
14089d9fcab62dcfde9100f145f0ff27f6b1599d1a5796283bf8ca7307a1f9e0N
Size
16KB
MD5
fc018c980dfb7f3174d99b38f8d71e30
SHA1
1a0e8c8f4c62c446bfb1319723cd07099958a2ee
SHA256
14089d9fcab62dcfde9100f145f0ff27f6b1599d1a5796283bf8ca7307a1f9e0
SHA512
e68a7ec4e2b7a757f36cda957c9c0820f992007d9dec24d7dac3e730157f8b60ea1ff1c6300d909e60beda3cd8477bc104c2352f19a8e96800df5c5b4ca51290
SSDEEP
192:e9nJWnO5WqFr+v3qWzpoc84UQKYRBZhMNDy+83PFxsdF5/nXy6xhbGwiT77emBEj:ywO5WqFrNcocy12+IYddbXiL3Ej
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14089d9fcab62dcfde9100f145f0ff27f6b1599d1a5796283bf8ca7307a1f9e0N |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ