Behavioral task
behavioral1
Sample
f50543c61e2c729871897f4e15bf95dfd1afd0611627d8fc2e1f2b73a443181e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f50543c61e2c729871897f4e15bf95dfd1afd0611627d8fc2e1f2b73a443181e.dll
Resource
win10v2004-20220812-en
General
-
Target
f50543c61e2c729871897f4e15bf95dfd1afd0611627d8fc2e1f2b73a443181e
-
Size
97KB
-
MD5
a6cf20fce5a98e97a89065091494a303
-
SHA1
42df93b7f699df3f09676e2ea7db3f0951b3532f
-
SHA256
f50543c61e2c729871897f4e15bf95dfd1afd0611627d8fc2e1f2b73a443181e
-
SHA512
f770202fe2066403c55724361deab49dd7aa793ef130a1c3a8f93a450bbbe47978a66009ff19f93136df3f229113558de26abddc999a6a9ee62b520680fdc22a
-
SSDEEP
3072:j93wD4qcEe5Eg4Wp5CI0Zl5mZqJuCEsxwiHVsn:j9y4y4ZCI0ZHeqJCPiHVI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
f50543c61e2c729871897f4e15bf95dfd1afd0611627d8fc2e1f2b73a443181e.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE