Behavioral task
behavioral1
Sample
9e54e8c9249cba113040d06913f9b147b4c259762ba0d729a92d66c84d5d4e27.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e54e8c9249cba113040d06913f9b147b4c259762ba0d729a92d66c84d5d4e27.dll
Resource
win10v2004-20220901-en
General
-
Target
9e54e8c9249cba113040d06913f9b147b4c259762ba0d729a92d66c84d5d4e27
-
Size
322KB
-
MD5
62a9789f90d024c3c90b8b6d29dfba40
-
SHA1
2006321e15b0cd23db6ec309dafb6e78cc7e3c22
-
SHA256
9e54e8c9249cba113040d06913f9b147b4c259762ba0d729a92d66c84d5d4e27
-
SHA512
44803bec6e08230f1386e998bd2525b114f276e2e20c7f7a1d9be75005c8e9331c639bfd271c6bcea5041fcab1b693637f76472ac58b3fe81785f71924c34c1e
-
SSDEEP
6144:dfHelpSPCY+dx10do2+VJCpvLscbjxhTM8b6vCtp+M5UYh9M2t/rN2pbYGs4/Qe:JHYJY+4D+V0LjlhTz2MBU4Tism4e
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
9e54e8c9249cba113040d06913f9b147b4c259762ba0d729a92d66c84d5d4e27.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 316KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE