Behavioral task
behavioral1
Sample
975ce3162257e773fbff69f01497d1768a06ccfd5bb8064be5e17ce20951c8de.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
975ce3162257e773fbff69f01497d1768a06ccfd5bb8064be5e17ce20951c8de.dll
Resource
win10v2004-20220901-en
General
-
Target
975ce3162257e773fbff69f01497d1768a06ccfd5bb8064be5e17ce20951c8de
-
Size
218KB
-
MD5
e4a3429a6d94b91194a18d15dd4b61b8
-
SHA1
d6fa9e8a59405cf788b922c8c1383c7c9597f90e
-
SHA256
975ce3162257e773fbff69f01497d1768a06ccfd5bb8064be5e17ce20951c8de
-
SHA512
e2ae9a0dfa269f9d2962ca273a0c4006f724a93f1e0365edabf3a84f1209584af27e7808b6e0662ed4c84125305f454496920190fef69ce982dc84c75dfc75bc
-
SSDEEP
6144:+ViMZpVOj2FMbzOfeIkZI8ntr0+y+/OVxEJT:+VzpVpFUOlY5tr0V+m
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
975ce3162257e773fbff69f01497d1768a06ccfd5bb8064be5e17ce20951c8de.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 580KB - Virtual size: 4KB
Size: 588KB - Virtual size: 4B
���� Size: 587KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA