Static task
static1
Behavioral task
behavioral1
Sample
c90e67200667acb9152d06652e100f1c3de3baf935f6c7340d06703e6d63a491.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c90e67200667acb9152d06652e100f1c3de3baf935f6c7340d06703e6d63a491.dll
Resource
win10v2004-20221111-en
General
-
Target
c90e67200667acb9152d06652e100f1c3de3baf935f6c7340d06703e6d63a491
-
Size
86KB
-
MD5
7e2282393a0f8acc0e739284f1b7ac61
-
SHA1
594eb6b763344619ccef5c28d26a0698224e09be
-
SHA256
c90e67200667acb9152d06652e100f1c3de3baf935f6c7340d06703e6d63a491
-
SHA512
660c28893df4b097f8c42aa40fbb784c1eafac3f8fc618e07cc780ac74795e7ed13b6894f9dd9463640569710d64a883ed39bfce06a479a48d983186a69b38c1
-
SSDEEP
1536:Xl6gjDMVC1Ew5ZHSBbeBZXEif0THDPciweqfQy0rGBoGtXh316V:Xl6SDMlGHSBbAZcTDaeqoy0cp1m
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
c90e67200667acb9152d06652e100f1c3de3baf935f6c7340d06703e6d63a491.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WIN0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE