ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
0921703c342cc992aff7ede83f79c620.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0921703c342cc992aff7ede83f79c620.dll
Resource
win10v2004-20231215-en
Target
0921703c342cc992aff7ede83f79c620
Size
7KB
MD5
0921703c342cc992aff7ede83f79c620
SHA1
3aed8e8e005cb801b06bad4989983955d968c189
SHA256
04388d85bde33551a7ffa70a45b0a9775c89417c924d31d071eaae1371813d3e
SHA512
8ff7d65811d0c6ed413e1869f644c7423b266d94594b8e49634b14fe25aa303f4bfa31a08bdb85c37d062d0d7ca4f3671ce87ea4df2c002e7ab86e0f6b0d724f
SSDEEP
96:SVya1jsXqxkb5tfXb4+bSLnTSZ+9xmcC/k+RkxcxQzewIeUbf72NouDfK+0j9O9:SVfYa44+OuZ+9xIy2xQPqqNlDfK+0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0921703c342cc992aff7ede83f79c620 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ