Static task
static1
Behavioral task
behavioral1
Sample
fa5d3580ac130a93c302f61e21398b2e996b95874943acd49e4698b217f5e273.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa5d3580ac130a93c302f61e21398b2e996b95874943acd49e4698b217f5e273.dll
Resource
win10v2004-20220812-en
General
-
Target
fa5d3580ac130a93c302f61e21398b2e996b95874943acd49e4698b217f5e273
-
Size
668KB
-
MD5
e0cbe6643b884f84f0f97abe05f0a5fb
-
SHA1
a916d4c18c9b222215457ba82c06d36c081cf325
-
SHA256
fa5d3580ac130a93c302f61e21398b2e996b95874943acd49e4698b217f5e273
-
SHA512
b6a6c56c4e387b61ae4ac290e8e20f4b2a8423d7d730170ba633adb6d3dfd7c66ebd146175e07e809e674dd1d2991602fa9e747b38aa159eb16113949db9c1a2
-
SSDEEP
12288:xYPMAZbdSX+4l0RgZdRJrBI+mjqa+mY6wIa20dREXQei9v5OM:xYPbxgx06ZXJrJabmFICdl9vE
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
fa5d3580ac130a93c302f61e21398b2e996b95874943acd49e4698b217f5e273.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
45X0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
45X1 Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE