Behavioral task
behavioral1
Sample
8ad950f28521463e9de2946e43953ff389b709cc16d733059298aa2fc4a77ec2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ad950f28521463e9de2946e43953ff389b709cc16d733059298aa2fc4a77ec2.dll
Resource
win10v2004-20220901-en
General
-
Target
8ad950f28521463e9de2946e43953ff389b709cc16d733059298aa2fc4a77ec2
-
Size
1.8MB
-
MD5
a12cb6fc609a5ee61a2c5ea75e1add54
-
SHA1
7359297a11b431f2780cfbc965a2ce09543100bf
-
SHA256
8ad950f28521463e9de2946e43953ff389b709cc16d733059298aa2fc4a77ec2
-
SHA512
f8114f7e62d655ab83f5b56160a73e90b221be0112974385aa6c5c6ac69b47783d7684d731c42846489cac1a47a20e9493ac6866647ead41f21b2bfe53a33173
-
SSDEEP
24576:BCgLMU4wvT+OU6BGDyMEt7ACVACgAxzAnUTaNv09zefaeWso:M/wvyOU6YDyJAHiAnFm9PMo
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
8ad950f28521463e9de2946e43953ff389b709cc16d733059298aa2fc4a77ec2.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE