Behavioral task
behavioral1
Sample
25a3a8dfbf806273dba8760178c979d4dae0cdd8bdf21cf187c3d940c6c01ff6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25a3a8dfbf806273dba8760178c979d4dae0cdd8bdf21cf187c3d940c6c01ff6.dll
Resource
win10v2004-20220812-en
General
-
Target
25a3a8dfbf806273dba8760178c979d4dae0cdd8bdf21cf187c3d940c6c01ff6
-
Size
20KB
-
MD5
d8bc857e0b028616b983f75d5977de12
-
SHA1
89b3ed71b491904e93954c6f2e3d1cee36ee611d
-
SHA256
25a3a8dfbf806273dba8760178c979d4dae0cdd8bdf21cf187c3d940c6c01ff6
-
SHA512
59156cf1c604f1835855d9d75e7cc73a51657ba64ed3a1c1d2a21abbc993b8a13ea4ccc5e626f01eba2a701377f98aa4ee48e36abe1e990df4a9135a43b4e6bf
-
SSDEEP
384:9CgCP62gVgjxI5421hxK31dQKx61FWYttAI2NlqP4mDm4/Nk:9CgCi2gV6f2D61dQKYDWYvAdNq4mDVk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
25a3a8dfbf806273dba8760178c979d4dae0cdd8bdf21cf187c3d940c6c01ff6.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE