BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
8db5c0dedd744ce70dbff69823a83b9d4171a6678205656c59d155eb7e50a210.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8db5c0dedd744ce70dbff69823a83b9d4171a6678205656c59d155eb7e50a210.dll
Resource
win10v2004-20220812-en
Target
8db5c0dedd744ce70dbff69823a83b9d4171a6678205656c59d155eb7e50a210
Size
279KB
MD5
031aa93ae2704d71a2dcf65dc43fb814
SHA1
6b5e7f6381771f8f483b19e81e4661238c0d5f98
SHA256
8db5c0dedd744ce70dbff69823a83b9d4171a6678205656c59d155eb7e50a210
SHA512
266984733c957248a30162e57499654c8bc8a4ce357055d965d352cec38d3c2a93473509d688486cb87d8e4beecb93530cdcbbeb4da7871175d4e84d5372b685
SSDEEP
6144:Fx+u9DMWekDz77VIrPM3cpUO6Yk1kcgknAMZgZo/N2U9EA0le:bn9sqP7VGk3S6NDrrio/cjA0Q
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ