Static task
static1
Behavioral task
behavioral1
Sample
f62f86c13841a5ca354f993f1d2f6e1b19f84cd9935e3f05cbdca151007c7779.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f62f86c13841a5ca354f993f1d2f6e1b19f84cd9935e3f05cbdca151007c7779.dll
Resource
win10v2004-20221111-en
General
-
Target
f62f86c13841a5ca354f993f1d2f6e1b19f84cd9935e3f05cbdca151007c7779
-
Size
56KB
-
MD5
9ed27253b9b308bbbc2a07eef31d1df6
-
SHA1
3558a91da499e38bb0325a18e8ba2399c569ed48
-
SHA256
f62f86c13841a5ca354f993f1d2f6e1b19f84cd9935e3f05cbdca151007c7779
-
SHA512
c2c9d281b31acbf43e1c8ba3b8d36559df609100c441fe521ae0a5f21886730f14e850b2031f2baaa24275b787d4767bac38d18785fb2c311cb7be65a23a4ca9
-
SSDEEP
1536:5BHFKhQooWcm+OuujGq0hRYfn96kOuy2+K+:zHFKhXuIGdOfYkOSp
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
f62f86c13841a5ca354f993f1d2f6e1b19f84cd9935e3f05cbdca151007c7779.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE