Behavioral task
behavioral1
Sample
a2fe54dcf7a6bf29b7a2f1f45415d3cb43192c46ccf23e149a2a3ac098cbab2d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2fe54dcf7a6bf29b7a2f1f45415d3cb43192c46ccf23e149a2a3ac098cbab2d.dll
Resource
win10v2004-20221111-en
General
-
Target
a2fe54dcf7a6bf29b7a2f1f45415d3cb43192c46ccf23e149a2a3ac098cbab2d
-
Size
33KB
-
MD5
3642fcb6565062a8c0a936e3df231820
-
SHA1
7e42394396606efb2e0609ccf1cae6680173df6c
-
SHA256
a2fe54dcf7a6bf29b7a2f1f45415d3cb43192c46ccf23e149a2a3ac098cbab2d
-
SHA512
0eed8e24d9923d2c1a1a020c4cd92089d362fcbe3f99a895e69dd1715b039ce08f1b42fe3b8609aa79ddfc87ed57c9e5458d775d17e0ab9efc989a4630f3d77d
-
SSDEEP
768:ngnw0gKd3h+Ay7Wv0ieINMMZ+jANLiiB2olZ8nbcuyD7UHA9:gnw0pQWvyIyMIjAY+2oX8nouy8HA9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a2fe54dcf7a6bf29b7a2f1f45415d3cb43192c46ccf23e149a2a3ac098cbab2d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE