b1d2553a0357be86530ab0e54b9f4fce566ebfafed0c8a2b6a9ca63da5c2cef4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1d2553a0357be86530ab0e54b9f4fce566ebfafed0c8a2b6a9ca63da5c2cef4
Size

52KB
MD5

54681bc9d8ded10c982d6b09202969f1
SHA1

f2934ca094798f34848869639a3b460b0f823ec8
SHA256

b1d2553a0357be86530ab0e54b9f4fce566ebfafed0c8a2b6a9ca63da5c2cef4
SHA512

d71264435e9257841f6cd1e034dd61384ddf5187e9efd085db6d63852514212c2b1ec69bdd51b4214d5b04256e10cd46236806cdabf9224790665d1458af0d21
SSDEEP

1536:LXGVDiZk+63KcAgrnniMYjikv7zK2VXE2bnouy8:LGVakZ3Kc5rnniMYjiylHout

Score

9^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Files

b1d2553a0357be86530ab0e54b9f4fce566ebfafed0c8a2b6a9ca63da5c2cef4
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

JDM0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

JDM1
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE