Behavioral task
behavioral1
Sample
a0ae852fea85b699aaf5595b9ab9234fa1f17b0c842190737166e3046a2a7f30.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0ae852fea85b699aaf5595b9ab9234fa1f17b0c842190737166e3046a2a7f30.dll
Resource
win10v2004-20221111-en
General
-
Target
a0ae852fea85b699aaf5595b9ab9234fa1f17b0c842190737166e3046a2a7f30
-
Size
98KB
-
MD5
884f15eab4e679ba2a4f111683909e7a
-
SHA1
c70375d46e739cc2cdfdf5e84241ba05c3eb9017
-
SHA256
a0ae852fea85b699aaf5595b9ab9234fa1f17b0c842190737166e3046a2a7f30
-
SHA512
39da8d67f86e84665fc7efbf548e2ab1ba911e305d1780223c6ce762b5d271fa41c85cfe7a4fc32de91ed4119a6d85249c8942a6e2347cbec58cb761966ec2b4
-
SSDEEP
3072:3ykri6qXguclpi0blA5ZmvU7uosKHloMhoHCC3e:35rEwuQhlA6Mj1FZjv
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a0ae852fea85b699aaf5595b9ab9234fa1f17b0c842190737166e3046a2a7f30.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE