Behavioral task
behavioral1
Sample
70d61c093ae1b50c8d77ae95dc6b6bc1fb3e6178f5459705618027a82e10f845.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
70d61c093ae1b50c8d77ae95dc6b6bc1fb3e6178f5459705618027a82e10f845.dll
Resource
win10v2004-20221111-en
General
-
Target
70d61c093ae1b50c8d77ae95dc6b6bc1fb3e6178f5459705618027a82e10f845
-
Size
488KB
-
MD5
f9ad4cb692cadf7d642d2f32a3e4c2cd
-
SHA1
8ba04c96989a7648d2480174d6d6cb7333dd91b8
-
SHA256
70d61c093ae1b50c8d77ae95dc6b6bc1fb3e6178f5459705618027a82e10f845
-
SHA512
8c91a3182c00732a36c1a5d361123a0ea81e8d56dd031ab8b12dbd17b8efc1123c004a67d00ee83e252d298dca4a00cfe8603c7ffe8d45073a75b1e1322e230a
-
SSDEEP
12288:ypRAIJEXo07yxkIxNBH/NH+V8IlOLmhdFwoNf98vxT7saA2NoS:yfAIJE4p1lNH+V8IsL4wef98Vs6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
70d61c093ae1b50c8d77ae95dc6b6bc1fb3e6178f5459705618027a82e10f845.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE