Behavioral task
behavioral1
Sample
f50854de582815e9da34bfb923348e6fcae908a13220881ddef7234053761209.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f50854de582815e9da34bfb923348e6fcae908a13220881ddef7234053761209.dll
Resource
win10v2004-20220901-en
General
-
Target
f50854de582815e9da34bfb923348e6fcae908a13220881ddef7234053761209
-
Size
98KB
-
MD5
39eec710c4e38a1057475e998c1c4ad5
-
SHA1
46c1db365cf842d2a2587c006fa7ab23c5d67ed9
-
SHA256
f50854de582815e9da34bfb923348e6fcae908a13220881ddef7234053761209
-
SHA512
1eb65015d732421f263731534a706d679e492a0067ec32032e45f4c3bb6497d656d4acb15459baaba5403ab440a70309221612eae734aac93f90c9df18942606
-
SSDEEP
3072:ZOSIUtRQpycAZ2x4VhADp3H5sA6Hic/Ws:pIqWbMKmhCZsA6HP/Ws
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
f50854de582815e9da34bfb923348e6fcae908a13220881ddef7234053761209.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE