Behavioral task
behavioral1
Sample
d6618a28693992a8a18f8f29a2ba8f384239c4ddda4d88d3af6efe2f7d7f9d2b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6618a28693992a8a18f8f29a2ba8f384239c4ddda4d88d3af6efe2f7d7f9d2b.dll
Resource
win10v2004-20220812-en
General
-
Target
d6618a28693992a8a18f8f29a2ba8f384239c4ddda4d88d3af6efe2f7d7f9d2b
-
Size
99KB
-
MD5
9a16633899ee3dbb496db34e489917eb
-
SHA1
83c2bcd3faf9a2a427a8764e53db792f33e99f31
-
SHA256
d6618a28693992a8a18f8f29a2ba8f384239c4ddda4d88d3af6efe2f7d7f9d2b
-
SHA512
c2dcf749caec2dc9651be6f5260b7967afc7472464cf6cf61029f71a10ad5db7da9f6c604b086de726dac9b3476bb23a0a0ab1bb264d5161e98266f8e5677ece
-
SSDEEP
1536:tmzEOnSND1R5ZtmijhIHTw9YWkUu+Dntcw4kuv1MP35ZPtTnhgISGUWyExrPW6uD:c7n4xZeTw9CR8vKv1MPHRQGUEoH7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
d6618a28693992a8a18f8f29a2ba8f384239c4ddda4d88d3af6efe2f7d7f9d2b.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE