??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
92256eca911971ed603f9e294050335a04969cc91a066f4878dc8371b617b76d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92256eca911971ed603f9e294050335a04969cc91a066f4878dc8371b617b76d.dll
Resource
win10v2004-20221111-en
Target
92256eca911971ed603f9e294050335a04969cc91a066f4878dc8371b617b76d
Size
264KB
MD5
447f5e34edbe6040b5cbfa522127529b
SHA1
1337855d0a2a870fcf1cfc4c3a07c841ec77c8fc
SHA256
92256eca911971ed603f9e294050335a04969cc91a066f4878dc8371b617b76d
SHA512
628f401794c742ef2f43fc98e8127e503ca3a33ff75ae49c23d03d74da51298420ee7cdec9c112f1f19123912f628ab48859cdb53209a03b9f71b67643ca292f
SSDEEP
6144:+yntJ707UOm6Qw6v7C6VQ5PWjNb7107We6Ad0nPkwQDK:x7UrQwyCpuNVadOPkwQDK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ