Behavioral task
behavioral1
Sample
d46fa0cacf7efae333f2642185fa92508566077c49f182bb8f2dc8f7d1d516ef.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d46fa0cacf7efae333f2642185fa92508566077c49f182bb8f2dc8f7d1d516ef.dll
Resource
win10v2004-20220812-en
General
-
Target
d46fa0cacf7efae333f2642185fa92508566077c49f182bb8f2dc8f7d1d516ef
-
Size
24KB
-
MD5
4794b3aeb5aae6b65a8e139bcef8fedf
-
SHA1
adf650bea1e8a4b0d8f5e163429b9aa0227bcb7c
-
SHA256
d46fa0cacf7efae333f2642185fa92508566077c49f182bb8f2dc8f7d1d516ef
-
SHA512
ecddddf84660dafc0fd87aed53a78070986c72a858d81ad2b28d9da53d779bfdbce736dfae161ba8c9471adccdf1267e08be96aa7d1740b92df2680dc7b4f63c
-
SSDEEP
384:yp3FxzZZKoJlwQGQqnw4GZhfcJ1lD0YQ3mtwbIh+V+eFM2sBQgX2rhScjzrWx7:yr1Z0o3ZGQqPYJcZD0LiJ+lQQgX2r
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
d46fa0cacf7efae333f2642185fa92508566077c49f182bb8f2dc8f7d1d516ef.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE