??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
2acd4cd1c39e99d9ca64d06e8420bb1eafc0b2f0027adc426f590577a5a39202.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2acd4cd1c39e99d9ca64d06e8420bb1eafc0b2f0027adc426f590577a5a39202.dll
Resource
win10v2004-20221111-en
Target
2acd4cd1c39e99d9ca64d06e8420bb1eafc0b2f0027adc426f590577a5a39202
Size
264KB
MD5
a93a863dd56cd53474b04648d32bebb8
SHA1
e6a14c193d4dd2e64700ea25ada2ede0f826a8fb
SHA256
2acd4cd1c39e99d9ca64d06e8420bb1eafc0b2f0027adc426f590577a5a39202
SHA512
a0923702c8ceaef04b85bb31bfcb71687e7a790d2cddb488c906c787e8965f413db79d6493ddc4bdef80aa9d5bad98b0bf89131a88266639cc014b11ab6745ca
SSDEEP
6144:Ae/tvsI/L4chLIVpW7qb6yMmSKEwEH7T+0aZ552NlixPgh:AAvLzTirWe+JDKEw6fi55gl8Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ