Behavioral task
behavioral1
Sample
91e87bb27174e592510edb18e1966502b0d1ce0e422ebeb0c190021dbbe616b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91e87bb27174e592510edb18e1966502b0d1ce0e422ebeb0c190021dbbe616b0.dll
Resource
win10v2004-20220812-en
General
-
Target
91e87bb27174e592510edb18e1966502b0d1ce0e422ebeb0c190021dbbe616b0
-
Size
324KB
-
MD5
61a6881c1a1b4ed3ee4ce83c0802bf1e
-
SHA1
5ea078b055e1464314ec8eaa9edbbad1d4c43e49
-
SHA256
91e87bb27174e592510edb18e1966502b0d1ce0e422ebeb0c190021dbbe616b0
-
SHA512
1db53a071da2e264bfea691678a304001af2aecd2e5db6434c9e02280a3346a026b99bc3032458e9084e328486c1f35cedcdd3d30c8a0af5e4fe7e99b075f841
-
SSDEEP
6144:nb2cBrPCj7rCRkwq1N6eXxWcSWfHCN5bgCWrsSXlY5cKy05I:npCjfCP8EiWcDiz4e5W
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
91e87bb27174e592510edb18e1966502b0d1ce0e422ebeb0c190021dbbe616b0.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE