Behavioral task
behavioral1
Sample
fd88775751a4a9c4151a17c3d8e75cc8cbf7a1a5fa0e10f98124a874cb22964d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd88775751a4a9c4151a17c3d8e75cc8cbf7a1a5fa0e10f98124a874cb22964d.dll
Resource
win10v2004-20220901-en
General
-
Target
fd88775751a4a9c4151a17c3d8e75cc8cbf7a1a5fa0e10f98124a874cb22964d
-
Size
86KB
-
MD5
3b2b00274b334a44805819084245b6c5
-
SHA1
0e7e5b92afe1a939ee6172ae936013712894c54f
-
SHA256
fd88775751a4a9c4151a17c3d8e75cc8cbf7a1a5fa0e10f98124a874cb22964d
-
SHA512
60aaf505a69f92c80db0ded3376457b0c7f9f30be2182f7793d43874a9ef1b020b6d96859750db3379e4916f474a3be1eb598710403c37b16db67373128d88ff
-
SSDEEP
1536:vaCPdp+0kbyH8OTfYYJw5cBo2tQObidkFQ+kwDRoujAqttQIlQhfq:vfvv688mftaYoEQGidJ+nDOuj3ttt5
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
fd88775751a4a9c4151a17c3d8e75cc8cbf7a1a5fa0e10f98124a874cb22964d.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE