c20ab9cfc2275fbd6e015b2ad67e7f48448abd3475d666c14247e4bbf46c81de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20ab9cfc2275fbd6e015b2ad67e7f48448abd3475d666c14247e4bbf46c81de
Size

52KB
MD5

dc3706f17bd90cbb67de94edb5dcdffb
SHA1

b11f1aa602703526a23ea2e086cbbf94fcc9bdcf
SHA256

c20ab9cfc2275fbd6e015b2ad67e7f48448abd3475d666c14247e4bbf46c81de
SHA512

2fd087310e3f32a6a0c32e87b2db4204dfeef1628fe36a06a69c14ae0d0218fa18bed1245a6be7c374b7b565e86cf19784a5621f27deccfbe2042b30730a1a49
SSDEEP

1536:EtJnNjUxiLApEQDR85Q3BAgWcWpfUYcpupMEnouy8:ajUkLHQl85Q3RWN20out

Score

9^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Files

c20ab9cfc2275fbd6e015b2ad67e7f48448abd3475d666c14247e4bbf46c81de
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

HDX0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HDX1
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE