KAV_Gout
SysDataBuffer
Behavioral task
behavioral1
Sample
1df104004dffbd2f4ccbda890d56d8d885df352168239cead905e423b679cacd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1df104004dffbd2f4ccbda890d56d8d885df352168239cead905e423b679cacd.dll
Resource
win10v2004-20220812-en
Target
1df104004dffbd2f4ccbda890d56d8d885df352168239cead905e423b679cacd
Size
124KB
MD5
90620395984bba68f23bd01b4d58cb60
SHA1
9f804b3e8aca9fe7e2b955508a22c4374cf0d3e6
SHA256
1df104004dffbd2f4ccbda890d56d8d885df352168239cead905e423b679cacd
SHA512
4999f2ab3f9f41ce44ff79f485755d241628e83729aea0786dbcfc8c55e5eab9fbbb49847d7f8a35dbce48c9da5a9f83dd374370770b9dd74c8dda5d21d5421f
SSDEEP
3072:RD6e2ypZf9oLRZ1DZZy9s+wZS66e0sYS9vUCWblvKlp:RD6eVpZFoLRZrZy7yS66e0nSAbIp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
KAV_Gout
SysDataBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ