Behavioral task
behavioral1
Sample
c48eb2693635eab1393924b45a9e9be6671b064451d05e55ba915bf15ab03e2c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c48eb2693635eab1393924b45a9e9be6671b064451d05e55ba915bf15ab03e2c.dll
Resource
win10v2004-20221111-en
General
-
Target
c48eb2693635eab1393924b45a9e9be6671b064451d05e55ba915bf15ab03e2c
-
Size
98KB
-
MD5
ba88c027c96cc8711979a76acf729615
-
SHA1
71211611e0593f59241129b5acc89dbf53b66fda
-
SHA256
c48eb2693635eab1393924b45a9e9be6671b064451d05e55ba915bf15ab03e2c
-
SHA512
8d10bea496ce82f65d71de6c9edafbece4e0e833100b0b7d18ae86023070c47f429c3790034f92fd0b0d5e8b7e72f8f158ed64b4a412a3014389e00a1cac646c
-
SSDEEP
1536:wqIoI37iD+ZdSZJZSnSqX0wSHCzdtgLLRLOx2tTUqDZ8F58jaOaj/+m8gs1eCi:wK9ffSnSynrgvRLG2tTUqDZ8FqzQo1I
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
c48eb2693635eab1393924b45a9e9be6671b064451d05e55ba915bf15ab03e2c.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE