BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
570f779ffeb450b46aaae51e9836971a6c0676e4683e528a3811ebe5ab227e04.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
570f779ffeb450b46aaae51e9836971a6c0676e4683e528a3811ebe5ab227e04.dll
Resource
win10v2004-20220901-en
Target
570f779ffeb450b46aaae51e9836971a6c0676e4683e528a3811ebe5ab227e04
Size
279KB
MD5
0f49189a318fb1abbb4e2681e4086d75
SHA1
883598651b6622a40ea9574415a0ba15376d3b91
SHA256
570f779ffeb450b46aaae51e9836971a6c0676e4683e528a3811ebe5ab227e04
SHA512
78468948fd98f9c7e11497efea1cfed7fe7af373e90a9e4a8e396ce7d38d14ccb5d0f34f82e81e3491da537cbde1b62c7e94fce123e9308af3a1ffeba7faf59f
SSDEEP
6144:Fx+u9DMWekDz77VIrPM3cpUO6Yk1kcgknAMZgZo/N2U9EA0l9:bn9sqP7VGk3S6NDrrio/cjA0z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ