??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
5d19966490ed986e4e16640d4ba20b5c41a06f6a7bf4f857b2382d0c0d1dcc5a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d19966490ed986e4e16640d4ba20b5c41a06f6a7bf4f857b2382d0c0d1dcc5a.dll
Resource
win10v2004-20220812-en
Target
5d19966490ed986e4e16640d4ba20b5c41a06f6a7bf4f857b2382d0c0d1dcc5a
Size
206KB
MD5
7d4c44cdb7d24557a53fbac4d4410fa0
SHA1
9acdd1d7a9a2e728f805d6bfac389a633cb790e9
SHA256
5d19966490ed986e4e16640d4ba20b5c41a06f6a7bf4f857b2382d0c0d1dcc5a
SHA512
938d29ab2c66577d58037c2a21be077d96116b9c5dfc97cf202337465c7e016ffa15d2dac1129e7ffed8b4011ebe88cf3457749acbac35e29bd591cd404dd903
SSDEEP
6144:ihXoIba6jLsauWewCo0W0PqBzo2eX3bU:ih5tsaYwkjX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ