XFD001arex
Static task
static1
Behavioral task
behavioral1
Sample
eb58f4c34bbe7fbded4cab8dda00f09d9d916a4310b14b1b39da9651a796469a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb58f4c34bbe7fbded4cab8dda00f09d9d916a4310b14b1b39da9651a796469a.dll
Resource
win10v2004-20220901-en
General
-
Target
eb58f4c34bbe7fbded4cab8dda00f09d9d916a4310b14b1b39da9651a796469a
-
Size
37KB
-
MD5
b58e8e946a12361bfb25bedb9c6dcf80
-
SHA1
9ed7fa1fd9a97b5cc2488b3e4073a88eb42ea11c
-
SHA256
eb58f4c34bbe7fbded4cab8dda00f09d9d916a4310b14b1b39da9651a796469a
-
SHA512
fcdd8353885677d43ee05c99b3f9384cb5f419c0ebc0da4c5848641438dbb535ec3504d4d1a2e352c414736e57fd5aa6149e5f026fa6ef2a8abc94a0f14cbe09
-
SSDEEP
768:trI7QNkktKauUi1daCeSBMthdxnBaClXgUrVSp4pyn:trIUNJtKxU+aCephHn0Cqgsphn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
eb58f4c34bbe7fbded4cab8dda00f09d9d916a4310b14b1b39da9651a796469a.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE