Run
Static task
static1
Behavioral task
behavioral1
Sample
648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9.dll
Resource
win10v2004-20230220-en
General
-
Target
648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9
-
Size
372KB
-
MD5
f593ac617e0a0f920e0f5a22860896c4
-
SHA1
e1b8ba83753a3b70e7dd96d8a871f3e694a57698
-
SHA256
648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9
-
SHA512
2bf1fd91ec4f219cb6a738fc6ae27f6a5671efbff4e480e53dcf2319c51e976ba1f7611baccaef6fc355b9c3e13f6954157339278b15d321e2cb2a0f1b1f3568
-
SSDEEP
6144:gNeMe1wH5lWhp1lZ0Z7p4IEC8uw94Cyy4ELHtJcaTMFx4kBDbPYHWQInSUa:yDe1wH5lAB+NEtKly4ELHfcaTJkxPZnS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9
Files
-
648b29326ea7fcefce1828ccf4dcb662cad9bbeb4403d1de216b48551a7a81b9.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
aNMtwQNP Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aNMtwQNP Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE