??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
98437cfc8f19c728237df95c72c698fc53610044d89f20a2d09f02323d9a8469.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98437cfc8f19c728237df95c72c698fc53610044d89f20a2d09f02323d9a8469.dll
Resource
win10v2004-20221111-en
Target
98437cfc8f19c728237df95c72c698fc53610044d89f20a2d09f02323d9a8469
Size
263KB
MD5
12b2cec4f154aca5e872d218323f5d14
SHA1
47e8763ca8db51405b75a3d16700d9d96236a246
SHA256
98437cfc8f19c728237df95c72c698fc53610044d89f20a2d09f02323d9a8469
SHA512
2441498dda5c0a2ecedb3d17e4d2f54c8d0fa048774e984dd40a6f42a01d4c5f9e0f00eb05eede49287cf5c74b80379688b1fe2336f1723b02fec25edf07f83c
SSDEEP
6144:AyyON4fR6m3XQauGZPfcC0gFVWQF7oR2nkTk03m4:AhON4RgaB0R2nkTksj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ