Behavioral task
behavioral1
Sample
c3ab469ac7ef93692695c3d61c62cbae4b64a6f5ab578825d7045fdd09a6e266.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3ab469ac7ef93692695c3d61c62cbae4b64a6f5ab578825d7045fdd09a6e266.dll
Resource
win10v2004-20220812-en
General
-
Target
c3ab469ac7ef93692695c3d61c62cbae4b64a6f5ab578825d7045fdd09a6e266
-
Size
860KB
-
MD5
6a7cd7dd26da7d0c3e9fa2363553b670
-
SHA1
6f1945076446a38ef50e6e7d17869b98b0715e23
-
SHA256
c3ab469ac7ef93692695c3d61c62cbae4b64a6f5ab578825d7045fdd09a6e266
-
SHA512
c6dd2bfe8237cc2091c83f7b744e76fb63b0ab6cd8fd940a9c17f03a32fdd0b9b24f1eaa6b344e167e550809cee3dbee16ef7637f5852c2818c73e28f4969206
-
SSDEEP
24576:9fW3mna1RgSTOqzrnex0QX4XyXzrpk20NXRQCkauG5wO6t:9fW3mna1RgSdvex0a4XyjrpgNBSaOO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
c3ab469ac7ef93692695c3d61c62cbae4b64a6f5ab578825d7045fdd09a6e266.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 854KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE