Static task
static1
Behavioral task
behavioral1
Sample
a4be5776cf1a428599035fc6e7f5221ad7f1e2c50b3eb6ecf4d37e13415d8a5c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4be5776cf1a428599035fc6e7f5221ad7f1e2c50b3eb6ecf4d37e13415d8a5c.dll
Resource
win10v2004-20221111-en
General
-
Target
a4be5776cf1a428599035fc6e7f5221ad7f1e2c50b3eb6ecf4d37e13415d8a5c
-
Size
94KB
-
MD5
5253cfec353fc7aae078707702370156
-
SHA1
18d85ac6f25eb9e7e87003809124a7ed8d11f0f3
-
SHA256
a4be5776cf1a428599035fc6e7f5221ad7f1e2c50b3eb6ecf4d37e13415d8a5c
-
SHA512
91477267dcd366729ee0e38c8b5c53d738c527119bb780ca4d8f9949eb449a77730340d1ba79c944b9e1c2cb29e1c50a7ea646b608f95e42bd8c1ba7d4b26048
-
SSDEEP
1536:GvM4qzi1JJAaT1WZiDdfeknI+CAZR0zYZgu7uHKxHrbMp+fo:/tG18a5WZipjISj0zY2u7uHKxHropmo
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
a4be5776cf1a428599035fc6e7f5221ad7f1e2c50b3eb6ecf4d37e13415d8a5c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 232KB - Virtual size: 4KB
Size: 240KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA