unser
Static task
static1
Behavioral task
behavioral1
Sample
f946199e2a5a7bd954671d892e15fa686b159fe805dbe5e25a78582ad97f5b48.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f946199e2a5a7bd954671d892e15fa686b159fe805dbe5e25a78582ad97f5b48.dll
Resource
win10v2004-20220812-en
General
-
Target
f946199e2a5a7bd954671d892e15fa686b159fe805dbe5e25a78582ad97f5b48
-
Size
523KB
-
MD5
59276742bbc4ceafc809aef52fec583b
-
SHA1
06fa49c47e0f9a97a29b918b42c9ee66cc506f79
-
SHA256
f946199e2a5a7bd954671d892e15fa686b159fe805dbe5e25a78582ad97f5b48
-
SHA512
ef4290f8ad64e5418aa58878b4ce22d32183f56e2087ba94360f8cb18d39508586abd79f0b93de2b8e598c00e5aa672983bbe03ef93d851a8d8e29938ec2f21d
-
SSDEEP
12288:0q0zwVvjSkffd5hiFNTFQIf+rDTllLbriQoF+FnBVWcmh4E:bG67hm5QaIVJjo8n7oh4E
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
f946199e2a5a7bd954671d892e15fa686b159fe805dbe5e25a78582ad97f5b48.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 516KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE