ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
9a8d2bc277ede73a709d168939a6ad11527e8dff080e8da75b9d1e95367c8bbb.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9a8d2bc277ede73a709d168939a6ad11527e8dff080e8da75b9d1e95367c8bbb.dll
Resource
win10v2004-20220812-en
Target
9a8d2bc277ede73a709d168939a6ad11527e8dff080e8da75b9d1e95367c8bbb
Size
14KB
MD5
150ae311b797ffd64b61a6d035a65e50
SHA1
a78ddaeb7f17b220fd05f16f980a45d9620f9f87
SHA256
9a8d2bc277ede73a709d168939a6ad11527e8dff080e8da75b9d1e95367c8bbb
SHA512
1028a590af5dbe0ce122ac70d3b1f761ae9e192312a45e4763b393f04b11cfae8f5913d8eb28310077360be47b6d4d2a12b710fc4d216ece45984e6f45b7c572
SSDEEP
192:46P+L7IJuj9Xs+/hionecVoWJS94ZK1lwLSIRWwnN6G0dMvHd/0BKwMakj2exZB3:4623jNhiohEZ8RWsxPR8Uakb3s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ