Behavioral task
behavioral1
Sample
8b4d35fe9a767ce106e455f960885b532e36e4b7cacc2aee1ebf6d6d1b0cc620.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b4d35fe9a767ce106e455f960885b532e36e4b7cacc2aee1ebf6d6d1b0cc620.dll
Resource
win10v2004-20221111-en
General
-
Target
8b4d35fe9a767ce106e455f960885b532e36e4b7cacc2aee1ebf6d6d1b0cc620
-
Size
97KB
-
MD5
c670d079092ff14286808c912f1b479e
-
SHA1
8200f5a05b376c62ae11b3e551b36d1ea4204066
-
SHA256
8b4d35fe9a767ce106e455f960885b532e36e4b7cacc2aee1ebf6d6d1b0cc620
-
SHA512
6763563a80662ba908f60e07d18b02a1a41ac9c6d9db82c91c40fa3e0576c52c5705361114430e2d9b81910720943872621189fa048e10f885748036d144a865
-
SSDEEP
1536:yFyiS1rOkYBc4LzOwwptKCiSAWLF2I5hz2sQf2RV7P/C0x1P0oSkh:yFYlOkYSRXYCrP5hHG2RVTLP0S
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
8b4d35fe9a767ce106e455f960885b532e36e4b7cacc2aee1ebf6d6d1b0cc620.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE