ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9f1bcb7522a5ed8c144d24051d5fc081e8a5341fe21fdc0e80a9e974ebf34c43.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9f1bcb7522a5ed8c144d24051d5fc081e8a5341fe21fdc0e80a9e974ebf34c43.dll
Resource
win10v2004-20220812-en
General
-
Target
9f1bcb7522a5ed8c144d24051d5fc081e8a5341fe21fdc0e80a9e974ebf34c43
-
Size
625KB
-
MD5
8324093e0f610c32d9de68c68ca463c0
-
SHA1
48bc902323c98b4426c5abaa829de129fd8de781
-
SHA256
9f1bcb7522a5ed8c144d24051d5fc081e8a5341fe21fdc0e80a9e974ebf34c43
-
SHA512
b79b1336bea007acababe31877e32290e95e3cfec19024f593eb866e506e07e579b1cd5f58227f433c9ad6defc93c638928185b7c0d95949b0867fb1c141f661
-
SSDEEP
12288:68POz9Px9DYmEoMGHiNcmmuJ7Yl3TFT5YUbOD+aZV/Wa1sQjnYy5gO/X6vB9OQ:jOz9PDudGHGNy3TFTf+vO06U6TO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
9f1bcb7522a5ed8c144d24051d5fc081e8a5341fe21fdc0e80a9e974ebf34c43.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ATA^_^ Size: 624KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE