ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4b7ed60baeb038c5508e6dfa16b6f755737ba0d9c594df8ee248498543f8cd0b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b7ed60baeb038c5508e6dfa16b6f755737ba0d9c594df8ee248498543f8cd0b.dll
Resource
win10v2004-20220812-en
General
-
Target
4b7ed60baeb038c5508e6dfa16b6f755737ba0d9c594df8ee248498543f8cd0b
-
Size
8KB
-
MD5
5242fde7dd8ad201797e74b1a349521b
-
SHA1
81235a21d6172f5a7a00d5f83816fccf755514eb
-
SHA256
4b7ed60baeb038c5508e6dfa16b6f755737ba0d9c594df8ee248498543f8cd0b
-
SHA512
cfbd15fe4a6c7f7ac31b6bf891d3a279ffbac3a0a46a394cbbfba6627df993448ff86953d7d5ecf6c4e084d8ed3a27c5293097effa898ca6f4d0b47a626374e9
-
SSDEEP
192:fUAuic5IcLgAdSzbdzzECiUlpSR9MoAvLxic:/mu7pbuCFUDMrvd
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
4b7ed60baeb038c5508e6dfa16b6f755737ba0d9c594df8ee248498543f8cd0b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Nmgu Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Nmgu Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fjdsakj3 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE