ae0f3f0b5d6856f75a842fcba49486db422d0c6a4798120c9ed42a09d76060d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae0f3f0b5d6856f75a842fcba49486db422d0c6a4798120c9ed42a09d76060d3
Size

14KB
MD5

fb4e14752f3bb85bea586da3e60a6446
SHA1

0c5476066de0502112d45f7100c3400aa7f98b41
SHA256

ae0f3f0b5d6856f75a842fcba49486db422d0c6a4798120c9ed42a09d76060d3
SHA512

94924a003c95e2fed95a7c4004fa642d47bedb8b7e5b7ac88ea49d75b1cbf09f150f71145b0b65bc105fba37043a5bd7bb51071a31015cff26db1dc7753a202e
SSDEEP

192:CqwlLjRQ+JXnwfwuHsNQVXtve9rwThijpsQvz9Os4RNQ0uwMM3FqJb:CqqjOOHiVXtW9ryi9lvz994Rg8F

Score

9^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Files

ae0f3f0b5d6856f75a842fcba49486db422d0c6a4798120c9ed42a09d76060d3
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

InstallHook

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ