BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
103e3be8e7b147872a6762cc8c34a93f34042e3a98f23d453d341fe8fbb59564.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
103e3be8e7b147872a6762cc8c34a93f34042e3a98f23d453d341fe8fbb59564.dll
Resource
win10v2004-20221111-en
Target
103e3be8e7b147872a6762cc8c34a93f34042e3a98f23d453d341fe8fbb59564
Size
279KB
MD5
714a329e8dd8836b72696dca3415a199
SHA1
68c3c7a95b7504ac28f22914af1a6b335315e75e
SHA256
103e3be8e7b147872a6762cc8c34a93f34042e3a98f23d453d341fe8fbb59564
SHA512
5068283ac197dc895ce4bf6e4afd0e75828925c3228f8b1e431ce72a750161576ffecdb5fbabf482c4561fa4cbf077c463eb61070dce7d94817192cc1ee9d7df
SSDEEP
6144:Fx+u9DMWekDz77VIrPM3cpUO6Yk1kcgknAMZgZo/N2U9EA0lh:bn9sqP7VGk3S6NDrrio/cjA07
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ