Static task
static1
Behavioral task
behavioral1
Sample
fff7ead51aff92d02c879a0018c2e00373245efb670fdedbf2f5d52f89ab0099.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fff7ead51aff92d02c879a0018c2e00373245efb670fdedbf2f5d52f89ab0099.dll
Resource
win10v2004-20220812-en
General
-
Target
fff7ead51aff92d02c879a0018c2e00373245efb670fdedbf2f5d52f89ab0099
-
Size
16KB
-
MD5
30ba8d4a0455f5d37fd93278b2806734
-
SHA1
475d28fd99515dc7e7e4a6c4d6b873910eb0f290
-
SHA256
fff7ead51aff92d02c879a0018c2e00373245efb670fdedbf2f5d52f89ab0099
-
SHA512
c4157e838d59704b15c89aaf61af5d0fba302baf6bdfd5fc42d6f49ad556b4cffa3a7a0167ccd9b77e828d1d12358fd56747434c3c2ad014a58e2e75d9acb157
-
SSDEEP
192:EI1Kxc+gBhj/KbAAgTBjbO52AYNDMNPgmA5xZA9sWlMJgHhbfdSMgyq6PLuF/SKW:RvFUctPJNwoj5xZA2XH6TuFqKUrHDJYq
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
fff7ead51aff92d02c879a0018c2e00373245efb670fdedbf2f5d52f89ab0099.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE