����
Behavioral task
behavioral1
Sample
46ce4af0ee2a07b1a9f46e7e252c75be66369735e89f3179318888a393c26024.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46ce4af0ee2a07b1a9f46e7e252c75be66369735e89f3179318888a393c26024.dll
Resource
win10v2004-20220901-en
General
-
Target
46ce4af0ee2a07b1a9f46e7e252c75be66369735e89f3179318888a393c26024
-
Size
251KB
-
MD5
93bbc6ac461ee280f52c51674a9940e2
-
SHA1
a0eb193173da8b65f4b9a2ea785a3001547983ff
-
SHA256
46ce4af0ee2a07b1a9f46e7e252c75be66369735e89f3179318888a393c26024
-
SHA512
9adeddfeef54e97bf8879bd8fe4668fa722b1db0522a4dd90c875811404c62e54778df57c5e6fc53fbb32496c67dbe78be7a64a848da48eb1ecb244ab24f94a4
-
SSDEEP
6144:dmepRv4Cc540oXjhrDB5rHMkRU8EIQlk6i2o5oS:M6o4DTlPDzWT1lkpPoS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
46ce4af0ee2a07b1a9f46e7e252c75be66369735e89f3179318888a393c26024.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE