Behavioral task
behavioral1
Sample
2a7168716c7e4c15530aadf06f541af023dc6f79aa3d1ed8f57a8b4fff6303bd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a7168716c7e4c15530aadf06f541af023dc6f79aa3d1ed8f57a8b4fff6303bd.dll
Resource
win10v2004-20220812-en
General
-
Target
2a7168716c7e4c15530aadf06f541af023dc6f79aa3d1ed8f57a8b4fff6303bd
-
Size
72KB
-
MD5
1accb73e01a99968426fdbb3503564c0
-
SHA1
d7e381f9a66828696af4e8fbb850ac4967bf2a18
-
SHA256
2a7168716c7e4c15530aadf06f541af023dc6f79aa3d1ed8f57a8b4fff6303bd
-
SHA512
b447a462f9f8d3476701422e682fb0f76bf564ef1bd3dad7cc94531540ef6d4d9d53dc14251cce63929f0642d478642b9715e3c3e3a264aa014bd677d3946540
-
SSDEEP
1536:UUVYNrNCJiqXM6Mv1dYH/n9VWdy+a/0/nTrux2GvN/CdVvj+1QRQKxNscOJuJBR:UUVSrNCUq86MncLWdnTrliN/C7b+PcOC
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2a7168716c7e4c15530aadf06f541af023dc6f79aa3d1ed8f57a8b4fff6303bd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE