ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
e041db50f0b8011e63875fc70f0bc769.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e041db50f0b8011e63875fc70f0bc769.dll
Resource
win10v2004-20240226-en
Target
e041db50f0b8011e63875fc70f0bc769
Size
37KB
MD5
e041db50f0b8011e63875fc70f0bc769
SHA1
bc40ec421a8a6770aaec94b241442cae018782a4
SHA256
c6e0c26207b0af3da86829169cc706f71f190570adb52175e2fe7947e78b3728
SHA512
76cab3596e3ff73a839df5bb4b1a18120e901f7ef3a721beecd08f0f3a8fccfe3e63971c3bac5805a24ad291c74c4bfd1d968ce093d2e0cbcdbeb0af8b8c0486
SSDEEP
384:cs2tdou4T5BIFkEdIvhFhc5PGJz9o0GMol10nF4xY:cs2su4TLIKE33n1hxY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e041db50f0b8011e63875fc70f0bc769 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE