Behavioral task
behavioral1
Sample
5a05faf28e6662232e3c62319e8d14f2a43a0ef9e157445fed0f9e173656903f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a05faf28e6662232e3c62319e8d14f2a43a0ef9e157445fed0f9e173656903f.dll
Resource
win10v2004-20220812-en
General
-
Target
5a05faf28e6662232e3c62319e8d14f2a43a0ef9e157445fed0f9e173656903f
-
Size
244KB
-
MD5
7d37a5ed1ee2ae130b1c906366ae5eb1
-
SHA1
f7399a7da9a3630a370edc6804be3e3f0d9b481b
-
SHA256
5a05faf28e6662232e3c62319e8d14f2a43a0ef9e157445fed0f9e173656903f
-
SHA512
8e7c1e9bc3c647d18185ed8511e5a5f3250aa1efddb5d6243dfb384299bef533c02602a83d300a1384bf6fb1b3aa4568ed9f3f03d987a21b0381224161102ae8
-
SSDEEP
6144:mJnmmdXfvMX/SRfoAEFfF5da+FSicoFb4t+3/eAB/wyR+x:Wmm9fEPSNoY+FSicoN4g3HwyRu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
5a05faf28e6662232e3c62319e8d14f2a43a0ef9e157445fed0f9e173656903f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE