CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
df2fa786529c8dbb86c2643d40b1fbec3cdfeeb44ec0866b1880bf230a214f07.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df2fa786529c8dbb86c2643d40b1fbec3cdfeeb44ec0866b1880bf230a214f07.dll
Resource
win10v2004-20221111-en
General
-
Target
df2fa786529c8dbb86c2643d40b1fbec3cdfeeb44ec0866b1880bf230a214f07
-
Size
344KB
-
MD5
b0c0b009b4fb3fdef838d1d6b3bc94a4
-
SHA1
40f2c4851d5082d39ac1b84717f778156e7639b1
-
SHA256
df2fa786529c8dbb86c2643d40b1fbec3cdfeeb44ec0866b1880bf230a214f07
-
SHA512
5894ff3a39009f1731f98866f0c990feb2061dfd25d036e0cdc91f1028dc9772db2622a7c40cb794f14e22d0c64f93b7748d46d0040d2f4a23b99d2cff8146c1
-
SSDEEP
6144:Jkit65xPqZr+f9siBVj2N2+72QjZ4Cnqprk8IWkDAxqhesPFFP4y43g:Jf65xi01siBVPwjcHIxUk/FZ743g
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
df2fa786529c8dbb86c2643d40b1fbec3cdfeeb44ec0866b1880bf230a214f07.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ATA^_^ Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE