BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
Behavioral task
behavioral1
Sample
ff7f52c11b94dc7ecbd16274c2623a7637d63cfce8dcfd21b03269a6e8e5589e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff7f52c11b94dc7ecbd16274c2623a7637d63cfce8dcfd21b03269a6e8e5589e.dll
Resource
win10v2004-20221111-en
Target
ff7f52c11b94dc7ecbd16274c2623a7637d63cfce8dcfd21b03269a6e8e5589e
Size
279KB
MD5
75f90895c0ed106816dd0c210809f711
SHA1
dead83959e5f9196e089ccf41059485f85a5ceb9
SHA256
ff7f52c11b94dc7ecbd16274c2623a7637d63cfce8dcfd21b03269a6e8e5589e
SHA512
ea144e059c558caa7d98fa761d4c8ecbeabd993bf1fdf59fe75d04d8855c9b1e65fb4c8a38804ac3b8cc911778de8209ede6c65b1cdcdc5d21d5c6c3951fb8da
SSDEEP
6144:Fx+u9DMWekDz77VIrPM3cpUO6Yk1kcgknAMZgZo/N2U9EA0lu:bn9sqP7VGk3S6NDrrio/cjA0U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BkCreate
BkDelete
BkDraw
SkinRemove
SkinStart
SkinStartW
SkinThread
SkinWindowSet
SkinWindowSetEx
SkinWindowSetExW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ