Behavioral task
behavioral1
Sample
db89f1ca47682b7377e999aa99faa3ecf2eb29d06ff5c9a8bfc540346d412a58.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db89f1ca47682b7377e999aa99faa3ecf2eb29d06ff5c9a8bfc540346d412a58.dll
Resource
win10v2004-20220812-en
General
-
Target
db89f1ca47682b7377e999aa99faa3ecf2eb29d06ff5c9a8bfc540346d412a58
-
Size
79KB
-
MD5
800c18bdf7aa597b2a0f15ba79deff4b
-
SHA1
22418c8d6295ab3cb0a4c731fc1483b1f22ad220
-
SHA256
db89f1ca47682b7377e999aa99faa3ecf2eb29d06ff5c9a8bfc540346d412a58
-
SHA512
b983629c5a2ec7da90ec3b2ae5efe1b10157ede19e8a749ea6ed0db6fd776559b7363d8996fd45bee41790f78441d4ddff168b770c6b6a92c8466f0ad2af6bab
-
SSDEEP
1536:r8hycex4GO5nC3F387hYYI5PFZSIIQmaNVAy7GcLHWbxbpEx0:rJZ6U38NneRIQmyVAynWld
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
db89f1ca47682b7377e999aa99faa3ecf2eb29d06ff5c9a8bfc540346d412a58.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE