Behavioral task
behavioral1
Sample
f99c6687a2f57e67531d7787120fc95b666164cc58c56dfd400dd817bd2c2018.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f99c6687a2f57e67531d7787120fc95b666164cc58c56dfd400dd817bd2c2018.dll
Resource
win10v2004-20220812-en
General
-
Target
f99c6687a2f57e67531d7787120fc95b666164cc58c56dfd400dd817bd2c2018
-
Size
525KB
-
MD5
c94a10620c8434c5b73b4a70993477ee
-
SHA1
9fe4cd2cacd95466cf40c734d2e9222fd3e093fd
-
SHA256
f99c6687a2f57e67531d7787120fc95b666164cc58c56dfd400dd817bd2c2018
-
SHA512
6a020076946a66d4c76217423f4de7390ea509ec9a9e96f129ef1a1211fe1d2e60947995963590a1aa0f90a50d2acbe3553d76ab62111a302b397565d9df79fc
-
SSDEEP
12288:04ppPP2xuURCR2OVRPRkClvgpjMD9lG5+bmgz4vl6C3xg02TJXgilNacuwJoSL:04ppPpCYVTbgpQ9lG5+bVz4RqpT19l8e
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
f99c6687a2f57e67531d7787120fc95b666164cc58c56dfd400dd817bd2c2018.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 520KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE