??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
9e7d29fdefa43226ba1a305d5ef10cc59509bf8683a65f9d4fc391974d096e2a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e7d29fdefa43226ba1a305d5ef10cc59509bf8683a65f9d4fc391974d096e2a.dll
Resource
win10v2004-20220812-en
Target
9e7d29fdefa43226ba1a305d5ef10cc59509bf8683a65f9d4fc391974d096e2a
Size
232KB
MD5
4774a4ea1ccd08c18dc0da616764eef0
SHA1
eb6d2b977833dd1b90d130b878f8796be03e84ce
SHA256
9e7d29fdefa43226ba1a305d5ef10cc59509bf8683a65f9d4fc391974d096e2a
SHA512
2a6ed398e64340fa53bc3d46c0247c81300feeaf647482456fbda799f06c718e69f07f9fa38ec85b3b12c1134d5a3b58a2cd0c0c271ac11a212fcddc624a941f
SSDEEP
6144:KeNFWAg3Zxl/qEDSGie+PslxOixcqTQIaR4qEEmh/fVpY:R6JfqEDSGitPsccaRSBY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ