SetFlushData
StartGameTask
StartGameTaskLine
Behavioral task
behavioral1
Sample
745066776581236d835c0ea2b06ef1e316e0034637493648510291b975b4e7ec.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
745066776581236d835c0ea2b06ef1e316e0034637493648510291b975b4e7ec.dll
Resource
win10v2004-20220812-en
Target
745066776581236d835c0ea2b06ef1e316e0034637493648510291b975b4e7ec
Size
779KB
MD5
d31113bd6f1d35891a9de883e4b2335f
SHA1
e8cc3e2b41b676ea6c81dfc6a9152e5cdaa0903c
SHA256
745066776581236d835c0ea2b06ef1e316e0034637493648510291b975b4e7ec
SHA512
de894ace0e98572de7350da20deb0997ba5bc9dbceeb7afc90bad600c7fb42637e7fe6254eb65df68f8016af10575451438cdcdc55579806016c454e29c66b62
SSDEEP
12288:wuYb0aaVmQnR6d1sodVgSfL7hGVJBbilWtfS/5efY8rnETiqS65NqWLSIk1FGw20:d1VpnRVo7OS/wrnKdNFSIkoqA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFlushData
StartGameTask
StartGameTaskLine
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ