Behavioral task
behavioral1
Sample
1de56f1f2297a7c9d2d4f5a4807eac144ada551deb03460d7b067a525338baca.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1de56f1f2297a7c9d2d4f5a4807eac144ada551deb03460d7b067a525338baca.dll
Resource
win10v2004-20220812-en
General
-
Target
1de56f1f2297a7c9d2d4f5a4807eac144ada551deb03460d7b067a525338baca
-
Size
25KB
-
MD5
606b859018fe8a7b9544a03dbfff1cdf
-
SHA1
5880dfa80fb2b8726f66af8456b786e7cfaf0bd9
-
SHA256
1de56f1f2297a7c9d2d4f5a4807eac144ada551deb03460d7b067a525338baca
-
SHA512
678e987b9d034cf40dbc1a4d22552e8d4e192bc03aa86afdb2c82a422fd7c0330e1cd7068d43b4cc048820cd7b220a0441086548a8bc44af2921cfbeaad7c8c3
-
SSDEEP
384:r90dyI9YHKNiXUf/KsYe9J/gl7qZ81VhkEJKLpLAvucgYBreYcHYsE0DmdmLOiM6:rvPQii7JwqZ81xodA5raHFEEzq77JE
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
1de56f1f2297a7c9d2d4f5a4807eac144ada551deb03460d7b067a525338baca.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE