ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
118a8f18fa6612d6b5db9fde2bcdff5bdba772667580d2979f2cc7f486504b62.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
118a8f18fa6612d6b5db9fde2bcdff5bdba772667580d2979f2cc7f486504b62.dll
Resource
win10v2004-20221111-en
Target
118a8f18fa6612d6b5db9fde2bcdff5bdba772667580d2979f2cc7f486504b62
Size
7KB
MD5
4eccfaee43c2e8e651c3576a8d4d5e75
SHA1
9f91dc7008efc1d7eb4d5c1446245b24d7916eec
SHA256
118a8f18fa6612d6b5db9fde2bcdff5bdba772667580d2979f2cc7f486504b62
SHA512
3382cae30cf491cd7f9783ec6e779de83602ae6e2d8d253aa79346cf83abb3d8d0456da483691efdfabcbddcd7bdb9da9576851e3aaaa60a37c944d8961204ab
SSDEEP
192:SVadLQ4WPXfiKKmtWiaeIakBKzoAVZGOY61sDcShUBzrlu:cadLs/t0ePY6ZhYksYc4zr0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ