DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
addc82c8d67d59a5235c87b753d30490a85ce03ff4bf21ed2928673226b81d7e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
addc82c8d67d59a5235c87b753d30490a85ce03ff4bf21ed2928673226b81d7e.dll
Resource
win10v2004-20221111-en
General
-
Target
addc82c8d67d59a5235c87b753d30490a85ce03ff4bf21ed2928673226b81d7e
-
Size
6KB
-
MD5
da8e84dc60d4e6408c1094c465ed53b6
-
SHA1
e6de49e58bf95e1a53f1f91965a766bc39526392
-
SHA256
addc82c8d67d59a5235c87b753d30490a85ce03ff4bf21ed2928673226b81d7e
-
SHA512
ca84a8afdd135ee127263fe92b67bf041c12426c4bb5220229b83475eec4ca7d9ff9116ca27ff028ce205c55c627215d26b07045b5b21e52db01470b9edfac99
-
SSDEEP
96:nPnAxfQd5ntYz/vchxQDLemGIeKLl99cJ+2BeVFcyR82TMP345QT3BL5aQtg:n4xfQ7tYzMhxQXvLL7eU2BeVU2T84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
addc82c8d67d59a5235c87b753d30490a85ce03ff4bf21ed2928673226b81d7e.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE