Behavioral task
behavioral1
Sample
23de7502efbb3d09ec2afc178665391a1def4d1572a43a6f8ad29a2642def035.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
23de7502efbb3d09ec2afc178665391a1def4d1572a43a6f8ad29a2642def035.dll
Resource
win10v2004-20220812-en
General
-
Target
23de7502efbb3d09ec2afc178665391a1def4d1572a43a6f8ad29a2642def035
-
Size
269KB
-
MD5
716d710605ded6376e86eeebe3c47896
-
SHA1
12dcd38df10863b1b6ad6f61ddab7ce4eebe384a
-
SHA256
23de7502efbb3d09ec2afc178665391a1def4d1572a43a6f8ad29a2642def035
-
SHA512
981dc9c7fb25d1f00f2c59e943eceb10fcf1f0416efeac0983a1aef57c27488751e3e6cbb658bcee10e195870779b8cb563cf48779ed869950318d0f92c4e91c
-
SSDEEP
6144:nHRRuC85DyifGGarW2K+vg6jnJugz+2pX0wcDVlaczVo8:nxRF85miuGarWPK37JTppEwcDV7Vo8
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
23de7502efbb3d09ec2afc178665391a1def4d1572a43a6f8ad29a2642def035.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE