BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
6605e370dbd31b0855096094d1f4541bbbebb8082b1fe1a0f9648b3e85e4796b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6605e370dbd31b0855096094d1f4541bbbebb8082b1fe1a0f9648b3e85e4796b.dll
Resource
win10v2004-20220812-en
Target
6605e370dbd31b0855096094d1f4541bbbebb8082b1fe1a0f9648b3e85e4796b
Size
277KB
MD5
8434f4b8a60cf05a33f5ac54cfc6d783
SHA1
6c7dff2a09b8c9b7dae075b6ec7d2c4b055fbae9
SHA256
6605e370dbd31b0855096094d1f4541bbbebb8082b1fe1a0f9648b3e85e4796b
SHA512
821e6665ca4caed71ba1c850ee3bd70d4034f0fdebde2ea54ffd7edf5de5bdc4156f4e3dcddd3174bb7a6fe5e8a0b1cf5207917db2ff727896f561152893daea
SSDEEP
6144:aYI/oyqZOYFm9krsaiVFmiDjf2rLDU0rEt4rDJyNwtR+lGOuas2za2Wm:FAoyqA38ZinmWfcxrE4rYwhaL2jm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ