BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
f8d98b88f65b4a6e55031afa2e86655870df3d618f770e7841391deaabadf170.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8d98b88f65b4a6e55031afa2e86655870df3d618f770e7841391deaabadf170.dll
Resource
win10v2004-20221111-en
Target
f8d98b88f65b4a6e55031afa2e86655870df3d618f770e7841391deaabadf170
Size
279KB
MD5
3203717543360b4bb50da8b5f7190d7b
SHA1
eaa2c18c6050bc2f0c6e366a53bff249c15cba90
SHA256
f8d98b88f65b4a6e55031afa2e86655870df3d618f770e7841391deaabadf170
SHA512
52144c58c6af1a2d594bb220e52abea0a45e6acc9ca209d20685220bcac0b6f72dde3950ef6b585f1556ef146e6a4dd77694a614a3677d8fc9e962c904135fe8
SSDEEP
6144:Fx+u9DMWekDz77VIrPM3cpUO6Yk1kcgknAMZgZo/N2U9EA0lZ:bn9sqP7VGk3S6NDrrio/cjA0v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ