??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
c1bbffbbd38e5d8be1925261a63d420d732ad74a374e1220f0eb46c211e2820f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1bbffbbd38e5d8be1925261a63d420d732ad74a374e1220f0eb46c211e2820f.dll
Resource
win10v2004-20220812-en
Target
c1bbffbbd38e5d8be1925261a63d420d732ad74a374e1220f0eb46c211e2820f
Size
264KB
MD5
93e633e8939a30489acd19f4fc564ba1
SHA1
c0b41ecea902e273c08bfd246b23c612d1923d20
SHA256
c1bbffbbd38e5d8be1925261a63d420d732ad74a374e1220f0eb46c211e2820f
SHA512
b26cb5d0ffaefc5cc7d5fbf39c6d2001d750e0bd5fb1758ea4d71c016eb2525630811f554170302217cf14ef36e338e8cdc71be9a7c59b32866cc127da9dee93
SSDEEP
6144:AqrXAkN2bosUgdaQqlJOKsqBBv+Hk1SNyYVszXmAnH:AqrzEc0Fc9Bv4ksNy+W2AH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ