BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
380028fc7255064ae2b5a7bcc17ab8ae4d4c6776c7286bc3ad4a557b18b42af6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
380028fc7255064ae2b5a7bcc17ab8ae4d4c6776c7286bc3ad4a557b18b42af6.dll
Resource
win10v2004-20220901-en
Target
380028fc7255064ae2b5a7bcc17ab8ae4d4c6776c7286bc3ad4a557b18b42af6
Size
269KB
MD5
24658a575157c9df89eade6683dc0a11
SHA1
c2ccfdead86ba9aa1f25b8c65707cfcfc65cc706
SHA256
380028fc7255064ae2b5a7bcc17ab8ae4d4c6776c7286bc3ad4a557b18b42af6
SHA512
c651d3e288ce9376c4b9053c412bacee2311a74d99e726723854dac6f031a0600bef8773b2d460a10a9b52b82b4932445337d44dcec83bcbdb7a375880516eb4
SSDEEP
6144:v63heR5I5RVad1ttZxctpRf4Gh2V5riRQy9ZQqZOYSbF:v7qOd1t2tv4PXn2hsVbF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE