Behavioral task
behavioral1
Sample
966976a198e68e03669c57d231f6e262761bfa979a5c19ca8dc7ec8a52ca3b94.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
966976a198e68e03669c57d231f6e262761bfa979a5c19ca8dc7ec8a52ca3b94.dll
Resource
win10v2004-20221111-en
General
-
Target
966976a198e68e03669c57d231f6e262761bfa979a5c19ca8dc7ec8a52ca3b94
-
Size
98KB
-
MD5
5577c2ab41c63d0c501c0a8f37eb6128
-
SHA1
3cc3606a4da35fbeb9c9d115ab82183dac778a35
-
SHA256
966976a198e68e03669c57d231f6e262761bfa979a5c19ca8dc7ec8a52ca3b94
-
SHA512
722732425af2d4b83ebabdb796ce00c3f7d6bec8842fbdaa3adc1bb850f4cfb228829359b0bc8212780c45d98a6023323abb1b98dd0eb8c7f077b1841f250142
-
SSDEEP
1536:YiypiFGrf074SeBiSFPGYIOmSHU8vmsWm4kdpdaj++5tn6p5:YJi8Tc4hiSF+YIlsU83Wm4kdiKNf
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
966976a198e68e03669c57d231f6e262761bfa979a5c19ca8dc7ec8a52ca3b94.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE