MMP
Static task
static1
Behavioral task
behavioral1
Sample
bd7ecc88210f64c016197d606ad4c48fedba2d5342f2fa0e035745cb64722dd0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd7ecc88210f64c016197d606ad4c48fedba2d5342f2fa0e035745cb64722dd0.dll
Resource
win10v2004-20220812-en
General
-
Target
bd7ecc88210f64c016197d606ad4c48fedba2d5342f2fa0e035745cb64722dd0
-
Size
749KB
-
MD5
917aea430255b9347bd81d56c4f01236
-
SHA1
234a1e3e3fff9847fff0f57b80d2d58a0d40ea00
-
SHA256
bd7ecc88210f64c016197d606ad4c48fedba2d5342f2fa0e035745cb64722dd0
-
SHA512
ba59869f0e16acdc27c038e99ec78a013ddb5fc6162cf90795168b94504aa2c3ee82097bbe62b2a96a13eb725251f565e73d5ae3f52587c372810f0f1987abf2
-
SSDEEP
12288:b48WCnHbvcaOPv0ycmdEjsnCkgrasVlvIRGOGFjQPNu0FypH:JEvPv0ycmdEjsCkgrasuGFj0u0FM
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
bd7ecc88210f64c016197d606ad4c48fedba2d5342f2fa0e035745cb64722dd0.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
���E Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 739KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE