Behavioral task
behavioral1
Sample
3e9697938c7e2a784f3ac4d5d81c1706febaaa2131ef1970cc5de5d60fa8f0a4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e9697938c7e2a784f3ac4d5d81c1706febaaa2131ef1970cc5de5d60fa8f0a4.dll
Resource
win10v2004-20221111-en
General
-
Target
3e9697938c7e2a784f3ac4d5d81c1706febaaa2131ef1970cc5de5d60fa8f0a4
-
Size
161KB
-
MD5
595fba201ff282517bc0ed26b89868b0
-
SHA1
b5bb7f0dcca2ae77f77f92f08e458b3d621cccf3
-
SHA256
3e9697938c7e2a784f3ac4d5d81c1706febaaa2131ef1970cc5de5d60fa8f0a4
-
SHA512
6c20c197ad8ecf9d23efc6b1738172c243e0e0a2ce6bca47cc08a56974b06722e0423cce65daa6508245e33efd19aa861a2b5fbaa68909d97a80fd122595d770
-
SSDEEP
3072:WiGJkL3brXQzGJ9aYifQLIxyYCWqSbCG29FK7QwIRKWluaFcg2Lout:FGAcYpIIh1SbCX9FK7NIRlfcgsoS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
3e9697938c7e2a784f3ac4d5d81c1706febaaa2131ef1970cc5de5d60fa8f0a4.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE