Behavioral task
behavioral1
Sample
d0714b05b53b4f5613daa116915780c647bbee3c84be0c8cb85bb7ea2d0a0541.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0714b05b53b4f5613daa116915780c647bbee3c84be0c8cb85bb7ea2d0a0541.dll
Resource
win10v2004-20221111-en
General
-
Target
d0714b05b53b4f5613daa116915780c647bbee3c84be0c8cb85bb7ea2d0a0541
-
Size
97KB
-
MD5
ac286c56815ce2f4194fa90e5799e4d2
-
SHA1
8af47f72356c82f6f991e191edcec2ee46971fb5
-
SHA256
d0714b05b53b4f5613daa116915780c647bbee3c84be0c8cb85bb7ea2d0a0541
-
SHA512
7c91d87f2b278ecbc039a3820f72792d73557463d76d2e6f21ffc7b0f2b0784d9d3adae2d98e5f6df841612e18adb62ec1e9de7fa027081007bd32d9bf63f4b0
-
SSDEEP
1536:ngVM7aXWlPkU5SIPZnmXFjIkPw8DvZ0Nuh0YQaxym++6ntoR2oaLmV3hCKooko:gVM7amlPkMZSTw8DvB+5oAo9PD
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
d0714b05b53b4f5613daa116915780c647bbee3c84be0c8cb85bb7ea2d0a0541.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE