Behavioral task
behavioral1
Sample
02fc1a1bf6ee53f8c89edfe5e629cbff8f3569c552c39e981bb4d8c501892359.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02fc1a1bf6ee53f8c89edfe5e629cbff8f3569c552c39e981bb4d8c501892359.dll
Resource
win10v2004-20220901-en
General
-
Target
02fc1a1bf6ee53f8c89edfe5e629cbff8f3569c552c39e981bb4d8c501892359
-
Size
93KB
-
MD5
0e185b704f0714c50e79218aba0f5366
-
SHA1
ee012a13e5b7585e1e56bc1c014e1cac9a89e71e
-
SHA256
02fc1a1bf6ee53f8c89edfe5e629cbff8f3569c552c39e981bb4d8c501892359
-
SHA512
11f41ece7ed85cf94646c8494581341de0203ea01d727357f433afdc0dcae07530743b3c25cbceef1a142dd9925779cb6c3088a8b21ba0ff5d44a993c38caddb
-
SSDEEP
1536:Z668xz4xPgRcPwEkQkwoUiks2GkrQvFaK8gY6KlDTWcCOXgrGR0Jg1YS7J/DA2ri:Z66HXNoUikG0QZ2vNTWTOXLSs9J/k2ri
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
02fc1a1bf6ee53f8c89edfe5e629cbff8f3569c552c39e981bb4d8c501892359.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE