DLL�ӿ�
Behavioral task
behavioral1
Sample
8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5.dll
Resource
win10v2004-20230703-en
General
-
Target
8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5
-
Size
403KB
-
MD5
e6c4ab12b9a1e8c1596a25d582269782
-
SHA1
c64f57ffaaf45965fb1af0b68f000e86bfacc287
-
SHA256
8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5
-
SHA512
df56bbf0a5e9250add711f66b0dff7e4aba90135b804fa96870c26060ab4be86827aac4d035bbf73b1a6ca61b2211d9b3a058b30cf8173e7d897dfa1346280d0
-
SSDEEP
12288:B4DNRc3i9sGBmO1wdCHO3CcnhBqh5VVrkoS:BENW3iT2dCHO3Nqhz9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5
Files
-
8ab401866f2fe57f8a65c2ff4ea4a293eb8f2d10043ac3b7223301052e6f0bb5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE