DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
de82005070b24a4692ee49f3c7c571940ed049affe02da821a3681408cb91710.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
de82005070b24a4692ee49f3c7c571940ed049affe02da821a3681408cb91710.dll
Resource
win10v2004-20220901-en
General
-
Target
de82005070b24a4692ee49f3c7c571940ed049affe02da821a3681408cb91710
-
Size
8KB
-
MD5
aae54c69a9189e8c63798672bf147730
-
SHA1
6b0e2c131bcea9ad10d572de2fbf9d1093bdd9cf
-
SHA256
de82005070b24a4692ee49f3c7c571940ed049affe02da821a3681408cb91710
-
SHA512
196c5117f426bf38ba4c90e3f76640199db61f04daea6beaa1155abfffb4fea571fc4720a9181e75bbcaf7615319d846bdc615a7657ff8a8714e426fef25e710
-
SSDEEP
96:nPF5v6zsyfrUK7YsqTsbLgo+zFHdpc+Je0DeE9Kwebma8K9TMP345QT3BL5aQt:nd5vGzDPCTDV5rH9VdXK9T84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
de82005070b24a4692ee49f3c7c571940ed049affe02da821a3681408cb91710.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE