Login
Md5
get_49ck
get_code
get_gamekey
get_list
get_ranging
get_uid
save
Behavioral task
behavioral1
Sample
bdeb127ffc8ccb29eff6768d584b7e192c76fba3fe52113bbae2ec3195197a9f.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bdeb127ffc8ccb29eff6768d584b7e192c76fba3fe52113bbae2ec3195197a9f.dll
Resource
win10v2004-20240426-en
Target
bdeb127ffc8ccb29eff6768d584b7e192c76fba3fe52113bbae2ec3195197a9f
Size
389KB
MD5
2df832e8461c8e3e4dd28a9339ccbaf7
SHA1
9f5a2a1a37fe523d390bb306b90ba34a5cb01e8e
SHA256
bdeb127ffc8ccb29eff6768d584b7e192c76fba3fe52113bbae2ec3195197a9f
SHA512
16d4216ec0eb8cf05776e855c743e15d05f49b34e2c8f8dd35eeb78038401474b32b63e55dc22a2cf637f01ec2752282f06db28881f3f38884962d51ad63352a
SSDEEP
6144:+d4oy98LzlwgCSyWfZQqlODl8yNYuoe3zJlT1dhC4be9rj+vdZvV5c78xf4DKr5:Doy98LqlSy268TozHT1a4TPr+s5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdeb127ffc8ccb29eff6768d584b7e192c76fba3fe52113bbae2ec3195197a9f |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Login
Md5
get_49ck
get_code
get_gamekey
get_list
get_ranging
get_uid
save
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ