?WormMain@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
94da40706ad8a8efa307543d48e95606453eb14389e63a873ef7932f676cffed.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94da40706ad8a8efa307543d48e95606453eb14389e63a873ef7932f676cffed.dll
Resource
win10v2004-20220901-en
General
-
Target
94da40706ad8a8efa307543d48e95606453eb14389e63a873ef7932f676cffed
-
Size
26KB
-
MD5
531cf97407f532c54b425c48f4a8cb10
-
SHA1
9dbd35905dec2c3757ad1dcc8fce5a8a7f0fe0ee
-
SHA256
94da40706ad8a8efa307543d48e95606453eb14389e63a873ef7932f676cffed
-
SHA512
795f63505d14da2f59dd7a28785633d17183f3739178f1428ce11900294d2545ae1ef34514e0f2a00608de3d633a7ee1bec4009d6b152e74a7bc1d89c8640d91
-
SSDEEP
768:sIUrFr9dQDG2/q2ts9m7LTi7mHnfCNZZ2C6/ix49:sIUhPQTq269mji7mH+4ix49
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
94da40706ad8a8efa307543d48e95606453eb14389e63a873ef7932f676cffed.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
code Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE