??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
eaf74f9df678252f1e1c75680674cacf844f75d3de3971a8224197ba37476e1c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf74f9df678252f1e1c75680674cacf844f75d3de3971a8224197ba37476e1c.dll
Resource
win10v2004-20220901-en
Target
eaf74f9df678252f1e1c75680674cacf844f75d3de3971a8224197ba37476e1c
Size
263KB
MD5
d45a015a91d8cb43e3dcf9100cdf5d3c
SHA1
ca6915d8c574ca46b22118d17995e1cb35a72d79
SHA256
eaf74f9df678252f1e1c75680674cacf844f75d3de3971a8224197ba37476e1c
SHA512
14155e61662ce66bc3ecb9ee49ae62e481b01d90bab6ce518b4f4d0ca690271b942953ea047c0380f6842fd57d646c4bcb8b181577c4473ed5239eab1c6e8bcf
SSDEEP
6144:AvFEia6z2z7P7ZCle0O0+tTvybjyUSo9yB0lJLIogluU4dxTIv31PMc7:AvKiaM2zz7Z4e0Odx8p7oB0dgYjmlUc7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ