ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
09c45670675b99882c9946d109df977b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09c45670675b99882c9946d109df977b.dll
Resource
win10v2004-20231222-en
Target
09c45670675b99882c9946d109df977b
Size
13KB
MD5
09c45670675b99882c9946d109df977b
SHA1
beb371392b3ab03474a9eef957983e686c088d81
SHA256
251d7f44ded406ce3b8a468185032ffc580a05ecf315fd00535c1b0b0eefe450
SHA512
3d4a85eaca213f1c07b142863c9128724939461f65e5cfaeb3aaceabd321238b0353dfde3c479fe51031608e8ab75ca7a6bf6a0010d63bad9bf00eb897e2806b
SSDEEP
384:UEARz/NoQJ4rVht9tjOXVVsdmQuayHQL0:q/NJKht9tVdgQ4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09c45670675b99882c9946d109df977b |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ