??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
34e04e49e935e1b55b1908f355cd0f81.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
34e04e49e935e1b55b1908f355cd0f81.dll
Resource
win10v2004-20231222-en
Target
34e04e49e935e1b55b1908f355cd0f81
Size
264KB
MD5
34e04e49e935e1b55b1908f355cd0f81
SHA1
fd8a31c77fb129ce96912e68707eaa82491b98a1
SHA256
7dd211158a9b085dc2b46897e49ae96301d2f815dd1f0dc18595f22f5941440f
SHA512
4ae944fc4a9438ad616546dc459b81ff4a55f1f9b5353a45f36fe5887880ab348dc40c2df9e0b5a3f3f61eec2b5344039e17d9b864a3dbea0f146f1463b002a9
SSDEEP
6144:ABNXGQhXPTroyFdegQbRHSBkBdEhCrYxF8lhKdtu:ABMo/pFMbRHikBdEhH/8l8d0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
34e04e49e935e1b55b1908f355cd0f81 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ