Behavioral task
behavioral1
Sample
5121c03f7335f9ffa69705d6299498728a131ea358a175dc5d72e804ad7c7de4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5121c03f7335f9ffa69705d6299498728a131ea358a175dc5d72e804ad7c7de4.dll
Resource
win10v2004-20220812-en
General
-
Target
5121c03f7335f9ffa69705d6299498728a131ea358a175dc5d72e804ad7c7de4
-
Size
276KB
-
MD5
6c6dbabecb02af779af005e1ccd6bdaf
-
SHA1
5cd251b0c56f61102e72c322a630ee41946ba484
-
SHA256
5121c03f7335f9ffa69705d6299498728a131ea358a175dc5d72e804ad7c7de4
-
SHA512
ad5b33f23caf37a790bc9cea97f16f45cb20fcb3ff473edb74ca851a99ecaa5870731ac11893719f9c0a75fa890062aff6fdbd7b8a6ebe0e269430c91887a11d
-
SSDEEP
6144:p8IW7mdVyyqqDDI55Ell21QNRBBOGF0sfe/SP2qrpl0AQ/AmMXYUoSC:hselHNRBwGFdreWZQ/DGoSC
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
5121c03f7335f9ffa69705d6299498728a131ea358a175dc5d72e804ad7c7de4.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE