??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
91c1c3b4a19617eafe8da3fc1d627fc4aed0d74978c5ccb6fdba45ce802991f6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91c1c3b4a19617eafe8da3fc1d627fc4aed0d74978c5ccb6fdba45ce802991f6.dll
Resource
win10v2004-20220901-en
Target
91c1c3b4a19617eafe8da3fc1d627fc4aed0d74978c5ccb6fdba45ce802991f6
Size
263KB
MD5
504bcb46048a58e84ea2995c0a93c1f0
SHA1
870d70c734d84850c7bd3e8de0c292bcd8205b18
SHA256
91c1c3b4a19617eafe8da3fc1d627fc4aed0d74978c5ccb6fdba45ce802991f6
SHA512
a45479488e0c9ead5742b59c5618c1ab49311207d3c4bfcdcdfcb807d713b1ab4529cc91d9fe4af3f0ddbca79cd74dc8625edeabc8a7bf65ca2b9a2cbf60f6af
SSDEEP
3072:Ax92FRsgUzgTpkWdwQH43DBklSLWBQ7Y9zzrr3B3ECTZc33PxWk29UOQ1rNZZIzl:Ar6lXwQEqsAzXtK34kE2ZIzs86Sx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ