Behavioral task
behavioral1
Sample
a7570948fe8867d3168a7094d3a7a81bc13cb4d2f5d1f4c636c581b896119758.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7570948fe8867d3168a7094d3a7a81bc13cb4d2f5d1f4c636c581b896119758.dll
Resource
win10v2004-20220901-en
General
-
Target
a7570948fe8867d3168a7094d3a7a81bc13cb4d2f5d1f4c636c581b896119758
-
Size
1.4MB
-
MD5
67dbe5d28e395471add4ffd57aa62dc8
-
SHA1
d35961034f6fb48b3479766ff93aeee180a62bdc
-
SHA256
a7570948fe8867d3168a7094d3a7a81bc13cb4d2f5d1f4c636c581b896119758
-
SHA512
49a914fd847a99ee8abcd53b39bc7cfd7df6135474675a8f81de1d71427f2194ee260900ce162e1b6ee30f98067071f5d9fe8fcd1eccb60312b3dc97468b2ec9
-
SSDEEP
12288:IHeoTHida4jfQV3QJYJKddHaleR/L+a0XaOJd4NIPcjojEIYw/1F4S+ru8ksEA7:IdKaiyJKv9kqMjF4xu877
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a7570948fe8867d3168a7094d3a7a81bc13cb4d2f5d1f4c636c581b896119758.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE