CPlApplet
Behavioral task
behavioral1
Sample
98100270d0e92b67d99933887ff11ca7b8c48a1e1367df0c1f53bbde097fea1d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98100270d0e92b67d99933887ff11ca7b8c48a1e1367df0c1f53bbde097fea1d.dll
Resource
win10v2004-20221111-en
General
-
Target
98100270d0e92b67d99933887ff11ca7b8c48a1e1367df0c1f53bbde097fea1d
-
Size
145KB
-
MD5
5ac08396066392d39784c5821d6616e5
-
SHA1
7da08249435c42c5ac0ca302cb085a679807b127
-
SHA256
98100270d0e92b67d99933887ff11ca7b8c48a1e1367df0c1f53bbde097fea1d
-
SHA512
ed93f2c84c16dc927696c3ef1973a555748ff06683421326160e256370451f5e498292c5fb0a88955ea03ff28637a9f7bc91cb1e361455db213cf8540e216c3e
-
SSDEEP
3072:l91xZRXVsBK5ZFazHQ4dhQOjK3waf/cOSJhH8GxrBPvchNIqWWap9out:l91oBID8HQi2SJ2wJEaf9oS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
98100270d0e92b67d99933887ff11ca7b8c48a1e1367df0c1f53bbde097fea1d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE