Behavioral task
behavioral1
Sample
74211c6e4dbdb5e39ab2e7fd105baaf3a4b736518066c1b4b338d18368c36208.dll
Resource
win7-20221111-en
General
-
Target
74211c6e4dbdb5e39ab2e7fd105baaf3a4b736518066c1b4b338d18368c36208
-
Size
122KB
-
MD5
c00e9edba10814a25fe21e89bcae9b3d
-
SHA1
4ab65361c487a38eb61fff63cf6089396a14a50e
-
SHA256
74211c6e4dbdb5e39ab2e7fd105baaf3a4b736518066c1b4b338d18368c36208
-
SHA512
c44e26479caf4e0fcdc4915f702a2682d142cc3dbf2665dc71af6fa84e3a604206b9949d285203fcce8b2447ac66cd89ed21a953184e97750749a5f29e934fd8
-
SSDEEP
3072:nkAQYi29IL60cwXca0lSUkB8QIKU3SzbQ97MJdIc4YjmsKGxout:3QVHL60c7aoGCCA9Mv9KQoS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
74211c6e4dbdb5e39ab2e7fd105baaf3a4b736518066c1b4b338d18368c36208.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE