Behavioral task
behavioral1
Sample
2cca3fb967a0d4ce79746b9f2dba1fc8808b3de2e6b36df1405935f7acde1b3b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2cca3fb967a0d4ce79746b9f2dba1fc8808b3de2e6b36df1405935f7acde1b3b.dll
Resource
win10v2004-20220901-en
General
-
Target
2cca3fb967a0d4ce79746b9f2dba1fc8808b3de2e6b36df1405935f7acde1b3b
-
Size
277KB
-
MD5
34bca4536d0ca47d5e9dd28b2d3c7690
-
SHA1
02daa392d69a360ad52287fd8ce7f105e799a032
-
SHA256
2cca3fb967a0d4ce79746b9f2dba1fc8808b3de2e6b36df1405935f7acde1b3b
-
SHA512
8fddee8cee834f29e1fa22a4ac4c40ac13b951d11c719f3c2db1336ced74a07ec4972035a7214dfcf37dcd77049a8e3638c35396e3fa21511d6aae562b65d5fd
-
SSDEEP
6144:rwN3/Kzj2ON+EriByBI13G3mEycxuepuikXnORVxnsSjHd+uoSol:rKKOS+AI13G3myuepuzXyZsSToS8
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2cca3fb967a0d4ce79746b9f2dba1fc8808b3de2e6b36df1405935f7acde1b3b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE