??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
165b22d7b2820e97a42bbae5d20638aa4e268ffa644b73e5851893f0e1dfc3f2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
165b22d7b2820e97a42bbae5d20638aa4e268ffa644b73e5851893f0e1dfc3f2.dll
Resource
win10v2004-20220812-en
Target
165b22d7b2820e97a42bbae5d20638aa4e268ffa644b73e5851893f0e1dfc3f2
Size
264KB
MD5
3b804c8286d80c972a2f522077b27b61
SHA1
bb9cbfad8dab63608346201219a209e656f44967
SHA256
165b22d7b2820e97a42bbae5d20638aa4e268ffa644b73e5851893f0e1dfc3f2
SHA512
dd5403aa61dd4f8525184436bb81b4bfd1608d5bdd3908df93ef48333a2c281004ad41a4a5db3e91c719b8a6323aec77681ff5b499caa6b9235380dd186c1464
SSDEEP
6144:OrnXSsBRiPJyHMALWhiHkYspP2Cca5yNlGCgOy:OT/CJsH2iwhdyNlv2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ