ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ba548440587aefc2a0ddfed3bb94661cade31cfbb9a85b6d2fcd49f150e229fd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba548440587aefc2a0ddfed3bb94661cade31cfbb9a85b6d2fcd49f150e229fd.dll
Resource
win10v2004-20220812-en
General
-
Target
ba548440587aefc2a0ddfed3bb94661cade31cfbb9a85b6d2fcd49f150e229fd
-
Size
64KB
-
MD5
dec31e92777d13bbb6aa59c922da0383
-
SHA1
8b27525c37299b6daa9528fc0508bf5cb15ccacb
-
SHA256
ba548440587aefc2a0ddfed3bb94661cade31cfbb9a85b6d2fcd49f150e229fd
-
SHA512
99c218a497ec5f26ceeff50ef43827a57b82e529db592ea25192a8b38ed354ae3cf699d1977c31ff2661751b7b9900451aa8535d24f94b854414dd54fc7882f9
-
SSDEEP
1536:r7JlBse2qyrPNQrA6f5JItIlD5K9raX5bjr:r7J8e2xrPy5JuIFs9Ub/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
ba548440587aefc2a0ddfed3bb94661cade31cfbb9a85b6d2fcd49f150e229fd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE