Behavioral task
behavioral1
Sample
e9ea948d0a331bdcda03ef9f0d9e8f58603bac791075f7f7d7e0fcb513715642.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e9ea948d0a331bdcda03ef9f0d9e8f58603bac791075f7f7d7e0fcb513715642.dll
Resource
win10v2004-20220901-en
General
-
Target
e9ea948d0a331bdcda03ef9f0d9e8f58603bac791075f7f7d7e0fcb513715642
-
Size
277KB
-
MD5
e2a7505235c1b2b0f86287484fa3169d
-
SHA1
5c05cff35e8d1eccd66a9e0d9c57273c31b1fc94
-
SHA256
e9ea948d0a331bdcda03ef9f0d9e8f58603bac791075f7f7d7e0fcb513715642
-
SHA512
31715c4c67c2935ed34daa7d79bc397a8c74612e666c5f276cf6bb1d3eab3f6104187c7dab69a3a1cb8b135a31ae5898f6d542f7aaf0174f19fa8e0cf8db1a15
-
SSDEEP
6144:Y71oYPPIjJzYHbTnxnsmx39Dq2M5+/wl0Axn9:Y7a5JzqbTxnB39DY4o6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
e9ea948d0a331bdcda03ef9f0d9e8f58603bac791075f7f7d7e0fcb513715642.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ