MMP
Static task
static1
Behavioral task
behavioral1
Sample
23fac6092340564837bb0768b30152a57ce38fa180090ec524eb0226d8e42dcb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23fac6092340564837bb0768b30152a57ce38fa180090ec524eb0226d8e42dcb.dll
Resource
win10v2004-20220812-en
General
-
Target
23fac6092340564837bb0768b30152a57ce38fa180090ec524eb0226d8e42dcb
-
Size
809KB
-
MD5
0b9ae35ba0cef85e51e6e723587fd11e
-
SHA1
90460137cc79e2ecfc4cb0d4459e74394acea719
-
SHA256
23fac6092340564837bb0768b30152a57ce38fa180090ec524eb0226d8e42dcb
-
SHA512
8f2d60a345d79a3041e5c63242500175d8dc86fb09a972bcea3463bd41789987a898985530aef027a66dfd4a84de8656faf7e87be8606b13ae29ff611610f961
-
SSDEEP
24576:YEWffmm+SJgWNkX9KeDMzbr9CApIcOoNGmZfWTi:YEWTJgWNQ9FDMB48PfWTi
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
23fac6092340564837bb0768b30152a57ce38fa180090ec524eb0226d8e42dcb.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
���E Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 799KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE