Behavioral task
behavioral1
Sample
a1b2f2c802ab7a9c1dc6a75b742a66bb59611d7613bbec802567757de2e125c0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a1b2f2c802ab7a9c1dc6a75b742a66bb59611d7613bbec802567757de2e125c0.dll
Resource
win10v2004-20220812-en
General
-
Target
a1b2f2c802ab7a9c1dc6a75b742a66bb59611d7613bbec802567757de2e125c0
-
Size
276KB
-
MD5
e8eb1bbff846dd5ce388a60f1f732bb9
-
SHA1
19406a76b66671c6aefe62d33ada9b405d66fb9e
-
SHA256
a1b2f2c802ab7a9c1dc6a75b742a66bb59611d7613bbec802567757de2e125c0
-
SHA512
517096ae5f1220a4819da35ffb9c3b20e64645f4e206475940b7db56940059e338f72796ddbc3e478feb8ec1d3223c4404e6dc405698ede5db6a96d39e2fc28e
-
SSDEEP
6144:LKzLgqEH3/wTu9daCUJNaiND98FWK6pJYqMOQGcFHHv8oSm:+zL/S3/wTuaCh4Da1OQGcFnv8oSm
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a1b2f2c802ab7a9c1dc6a75b742a66bb59611d7613bbec802567757de2e125c0.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE