Behavioral task
behavioral1
Sample
e7db9ce11bc550c6435334799c5cb792d913f03dc07052bc602b8001368ed2ad.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e7db9ce11bc550c6435334799c5cb792d913f03dc07052bc602b8001368ed2ad.dll
Resource
win10v2004-20220812-en
General
-
Target
e7db9ce11bc550c6435334799c5cb792d913f03dc07052bc602b8001368ed2ad
-
Size
98KB
-
MD5
81f8de379c885c0d4f3fde069e1ae512
-
SHA1
5e8a3c29f82cf8ad44851b93db891a962028cc2d
-
SHA256
e7db9ce11bc550c6435334799c5cb792d913f03dc07052bc602b8001368ed2ad
-
SHA512
6fa506201a0fdce8fdd23559b5f1ec4074dadd6ea06257f4df702bfa6fd71ac88d6d440bd2429df49b960bafb57a3f255a11a9f4d8c45da08cdcea46e6a0b2ea
-
SSDEEP
3072:NkN+8OrDAFBlroN7JgkuSIUolKiY6RGJbX:NejF3oBZ8Ka6D
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
e7db9ce11bc550c6435334799c5cb792d913f03dc07052bc602b8001368ed2ad.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE