KAV_Gout
SysDataBuffer
Behavioral task
behavioral1
Sample
f08758d9cca6234979bbb56ac41f407c773322569a495e7415637a7f932d8409.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f08758d9cca6234979bbb56ac41f407c773322569a495e7415637a7f932d8409.dll
Resource
win10v2004-20220812-en
Target
f08758d9cca6234979bbb56ac41f407c773322569a495e7415637a7f932d8409
Size
14KB
MD5
4b63bea3b0dce1b7fc8ae90a9bd916fa
SHA1
cce7cf85b89f287cf9d1e4ce0ef74c5895d89b7d
SHA256
f08758d9cca6234979bbb56ac41f407c773322569a495e7415637a7f932d8409
SHA512
b8236c482f0eb6781205d2a687a7f503337d4d53acc8278b1ec332efa5e5878afc91cafb407dcf8209a25a41ed8be9fdd1b6bed88b1160b5f1f48b7729de4415
SSDEEP
192:sCbhq+ft50llk/OrUjT/dDNbAuqTaf30NO2dklFrMidVaEMI3NmRz6Ca+vtStxeA:CG50Dy4U1DN+mfqklPu2aTLMeA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
KAV_Gout
SysDataBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ