ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
fe3d853eabadf2d6607992c8321b2ffd61fafa0bb13e1481bef4823bd3646fb5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe3d853eabadf2d6607992c8321b2ffd61fafa0bb13e1481bef4823bd3646fb5.dll
Resource
win10v2004-20220812-en
General
-
Target
fe3d853eabadf2d6607992c8321b2ffd61fafa0bb13e1481bef4823bd3646fb5
-
Size
11KB
-
MD5
d7bc8788a2ddd62e6d8977db79dd9b10
-
SHA1
7160a8be18fd1b99c9a16793aff2dd20ae7c009b
-
SHA256
fe3d853eabadf2d6607992c8321b2ffd61fafa0bb13e1481bef4823bd3646fb5
-
SHA512
99d030c6fd854be46f1561aecf341e97d1add0e4427aa8898fef1bcb924ef31ee8f5ab40cfa83bb1a9d94fee6dcfec2ec1acc468c0d03e530d67ed519a9062e6
-
SSDEEP
192:1BeyXvRz1BCoJ/Z0HLzxG3R8f577meXqI82PapWIGvcspVV22LeWd48Md2JL:LvvRP/un7577meXq0PapScSV2UdhQ2F
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
fe3d853eabadf2d6607992c8321b2ffd61fafa0bb13e1481bef4823bd3646fb5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.CQSN Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE