Behavioral task
behavioral1
Sample
01165dc7689f47cd59fb1ac09d52065b79a17b30de992aac4eb270cc6cb6d61f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01165dc7689f47cd59fb1ac09d52065b79a17b30de992aac4eb270cc6cb6d61f.dll
Resource
win10v2004-20220901-en
General
-
Target
01165dc7689f47cd59fb1ac09d52065b79a17b30de992aac4eb270cc6cb6d61f
-
Size
506KB
-
MD5
a36e7c5c95f0ebbfbbc13758685667bc
-
SHA1
81f337e83912b3cd2448cc3b8714866e12727be4
-
SHA256
01165dc7689f47cd59fb1ac09d52065b79a17b30de992aac4eb270cc6cb6d61f
-
SHA512
e0dd11e15ee412e33c966f50de8361bbba6db5c474e0b00c6ade2255c12f200ef118e618d5a8cad284ec64288d6966ea4172c523bb234a37531dff8e11ee27ef
-
SSDEEP
12288:0p+fAi6ECaNsWKNRwlmeAr8WnTA/lkLPpTD1PJZK:0pwU5/veArJnTA9Ev1RZK
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
01165dc7689f47cd59fb1ac09d52065b79a17b30de992aac4eb270cc6cb6d61f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE