Static task
static1
Behavioral task
behavioral1
Sample
96d304245367164367e9baf4d263bd5960d2b465fd524d6c2cbfd82c51d6d0ae.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
96d304245367164367e9baf4d263bd5960d2b465fd524d6c2cbfd82c51d6d0ae.exe
Resource
win10v2004-20230220-en
General
-
Target
9577c2ffffe9ff8e69d8895e6578adf6.bin
-
Size
589KB
-
MD5
a80645559e72b0a5e1885580be95cddf
-
SHA1
371251de83fbb11f499dd8fed230c660788ded0a
-
SHA256
986867e2b911ac733740e9cc37e8cd37eb3f2b227778b6633a5ca144cd3b68c1
-
SHA512
8f6d7602fcc90947e9a53e3e0904c3e9f3e7570feb20153e215ee467dca7a67354f63096a65cc225c6d28fd98673222d2668513ae716ae140394e45f057bc5e7
-
SSDEEP
12288:AVvHJbsNwW8NdRK6Yt4qxLJriXVkL8KKjx0DaVHClCCXYQf9AUY5:AlJbsNB8NS9Hr+XO8hf3CXYQf/o
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/96d304245367164367e9baf4d263bd5960d2b465fd524d6c2cbfd82c51d6d0ae.exe acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/96d304245367164367e9baf4d263bd5960d2b465fd524d6c2cbfd82c51d6d0ae.exe
Files
-
9577c2ffffe9ff8e69d8895e6578adf6.bin.zip
Password: infected
-
96d304245367164367e9baf4d263bd5960d2b465fd524d6c2cbfd82c51d6d0ae.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE